Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:43:40 UTC
Home > List all groups > List all tools > List all groups using tool beendoor
 Tool: beendoor
Names beendoor
Category Malware
Type Backdoor, Info stealer
Description
(Proofpoint) Much like Crimson RAT and Peppy RAT, Beendoor is capable of taking
screenshots of the victims desktop. On Beendoor’s C&C we were able to recover a screenshot
that appears to have been taken from one of the malware developer’s computer.
Information
<https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.beendoor>
Last change to this tool card: 23 April 2020
Download this tool card in JSON format
All groups using tool beendoor
Changed Name Country Observed
APT groups
  Transparent Tribe, APT 36 2013-Mar 2025  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bb44b6ac-aac2-4a41-a348-a1fe2dca7f82
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bb44b6ac-aac2-4a41-a348-a1fe2dca7f82
Page 1 of 1