Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 17:34:25 UTC Home > List all groups > List all tools > List all groups using tool LIGHTBOLT Tool: LIGHTBOLT Names LIGHTBOLT Category Malware Type Backdoor Description LIGHTBOLT is a utility with the ability to perform HTTP GET requests for a list of user-specified URLs. The responses of the HTTP requests are then saved as MHTML files, which are added to encrypted RAR files. LIGHTBOLT has the ability to use software certificates for authentication. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool LIGHTBOLT Changed Name Country Observed APT groups   Comment Crew, APT 1 2006-May 2018 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b666cc89-051d-4ebb-b3f2-573e508a4452 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b666cc89-051d-4ebb-b3f2-573e508a4452 Page 1 of 1