{
	"id": "d84dfa47-4214-424f-8f86-567c668b6bb9",
	"created_at": "2026-04-06T00:21:43.220637Z",
	"updated_at": "2026-04-10T03:22:12.373828Z",
	"deleted_at": null,
	"sha1_hash": "818498e5d572a45ea2bb23d3e202ed1e28fa64df",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 45848,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 16:59:54 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Gigabud\n Tool: Gigabud\nNames\nGigabud\nGigabud RAT\nCategory Malware\nType Banking trojan, Backdoor, Info stealer, Credential stealer\nDescription\n(Group-IB) One of Gigabud RAT’s unique features is that it doesn’t execute any malicious\nactions until the user is authorized into the malicious application by a fraudster, as will be\nshown in the Distribution section, which makes it harder to detect. Instead of using HTML\noverlay attacks, Gigabud RAT gathers sensitive information primarily through screen\nrecording.\nInformation Malpedia Last change to this tool card: 06 September 2023\nDownload this tool card in JSON format\nAll groups using tool Gigabud\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5a809ab7-3b4e-418f-af13-2c897c3089b5\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5a809ab7-3b4e-418f-af13-2c897c3089b5\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5a809ab7-3b4e-418f-af13-2c897c3089b5"
	],
	"report_names": [
		"listgroups.cgi?u=5a809ab7-3b4e-418f-af13-2c897c3089b5"
	],
	"threat_actors": [],
	"ts_created_at": 1775434903,
	"ts_updated_at": 1775791332,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/818498e5d572a45ea2bb23d3e202ed1e28fa64df.pdf",
		"text": "https://archive.orkl.eu/818498e5d572a45ea2bb23d3e202ed1e28fa64df.txt",
		"img": "https://archive.orkl.eu/818498e5d572a45ea2bb23d3e202ed1e28fa64df.jpg"
	}
}