Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 17:17:54 UTC Home > List all groups > List all tools > List all groups using tool RDPWrap Tool: RDPWrap Names RDPWrap Category Malware Type Backdoor Description (AnyViewer) Many users of RDP may have heard of RDP Wrapper before. RDP Wrapper works as a layer between Service Control Manager and Terminal Services. Or say, it’s like a pipe, which connects Service Control Manager and Terminal Services. It enables Remote Desktop Host support and concurrent RDP sessions. Instead of modifying termsrv.dll file, the original termsrv.dll file remains untouched. Information Last change to this tool card: 15 February 2023 Download this tool card in JSON format All groups using tool RDPWrap Changed Name Country Observed APT groups   OPERA1ER [Unknown] 2016-Jul 2023 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9cf7f09d-2498-45dc-8690-1b58ca1d709a https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9cf7f09d-2498-45dc-8690-1b58ca1d709a Page 1 of 1