Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 19:06:34 UTC Home > List all groups > List all tools > List all groups using tool KeeThief Tool: KeeThief Names KeeThief Category Tools Type Credential stealer Description Methods for attacking KeePass 2.X databases, including extracting of encryption key material from memory. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool KeeThief Changed Name Country Observed APT groups   APT 20, Violin Panda 2014-2017   1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d4468505-8920-40f1-8fc8-d529e25ac291 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d4468505-8920-40f1-8fc8-d529e25ac291 Page 1 of 1