Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 17:14:05 UTC Home > List all groups > List all tools > List all groups using tool TAINTEDSCRIBE Tool: TAINTEDSCRIBE Names TAINTEDSCRIBE Category Malware Type Backdoor Description (US-CERT) Working with U.S. Government partners, DHS, FBI, and DoD identified Trojan malware variants used by the North Korean government. This malware variant has been identified as TAINTEDSCRIBE. Information MITRE ATT&CK Malpedia Last change to this tool card: 30 December 2022 Download this tool card in JSON format All groups using tool TAINTEDSCRIBE Changed Name Country Observed APT groups Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f88fe919-9d69-4c98-a58f-66010d2209a4 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f88fe919-9d69-4c98-a58f-66010d2209a4 Page 1 of 1