Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 19:57:54 UTC Home > List all groups > List all tools > List all groups using tool NewsReels Tool: NewsReels Names NewsReels Category Malware Type Backdoor, Exfiltration Description The NEWSREELS malware family is an HTTP based backdoor. When first started, NEWSREELS decodes two strings from its resources section. These strings are both used as C2 channels, one URL is used as a beacon URL (transmitting) and the second URL is used to get commands (receiving). The NEWSREELS malware family is capable of performing file uploads, downloads, creating processes or creating an interactive reverse shell. Information Malpedia Last change to this tool card: 23 April 2020 Download this tool card in JSON format All groups using tool NewsReels Changed Name Country Observed APT groups   Comment Crew, APT 1 2006-May 2018 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=40b53b58-bd6a-4207-b094-b3e015ecd24e https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=40b53b58-bd6a-4207-b094-b3e015ecd24e Page 1 of 1