Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 15:33:34 UTC Home > List all groups > List all tools > List all groups using tool DangerAds Tool: DangerAds Names DangerAds Category Malware Type Loader Description (NSFOCUS) This is a loader Trojan used by AtlasCross in this activity. Its main function is to detect the host environment and execute a built-in shellcode in its own process, and then the shellcode loads and runs subsequent Trojan programs. Information Last change to this tool card: 12 October 2023 Download this tool card in JSON format All groups using tool DangerAds Changed Name Country Observed APT groups AtlasCross [Unknown] 2023 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=dacb52ee-802a-4f83-8a08-3021ed8e6447 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=dacb52ee-802a-4f83-8a08-3021ed8e6447 Page 1 of 1