Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 16:22:45 UTC
 Tool: DDG
Names DDG
Category Malware
Type Miner
Description
(Qihoo 360) DDG uses a C2 and HUB layout to communicate with its clients. The HUB
is a set of IPs and domain names that are used to provide Miner program for the
compromised clients to download.
Information
Malpedia AlienVault OTX Last change to this tool card: 28 December 2021
Download this tool card in JSON format
All groups using tool DDG
Changed Name Country Observed
Other groups
 Pacha Group 2018-May 2019
1 group listed (0 APT, 1 other, 0 unknown)
↑
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b4dfccfd-2fc6-4f78-8325-19dc5d9edce9
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b4dfccfd-2fc6-4f78-8325-19dc5d9edce9
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=b4dfccfd-2fc6-4f78-8325-19dc5d9edce9
Page 2 of 2

Other groups Pacha Group 2018-May 2019 
1 group listed (0 APT, 1 other, 0 unknown) 
↑   
   Page 1 of 2