Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 17:25:49 UTC
Home > List all groups > List all tools > List all groups using tool Graphican
 Tool: Graphican
Names Graphican
Category Malware
Type Backdoor
Description
(Symantec) Graphican is an evolution of the known Flea backdoor Ketrican, which itself was
based on a previous malware — BS2005 — also used by Flea. Graphican has the same basic
functionality as Ketrican, with the difference between them being Graphican’s use of the
Microsoft Graph API and OneDrive to obtain its command-and-control (C&C) infrastructure.
Information
<https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/flea-backdoor-microsoft-graph-apt15>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.graphican>
Last change to this tool card: 13 October 2023
Download this tool card in JSON format
All groups using tool Graphican
Changed Name Country Observed
APT groups
  Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon 2010-Oct 2024  
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=961c6112-5d8c-4fd2-b385-25982650179c
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=961c6112-5d8c-4fd2-b385-25982650179c
Page 1 of 1