Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 19:11:49 UTC
Home > List all groups > List all tools > List all groups using tool NSIS
 Tool: NSIS
Names
NSIS
Nullsoft Scriptable Install System
Category Tools
Type Loader
Description
(Wikipedia) Nullsoft Scriptable Install System (NSIS) is a script-driven installer authoring tool
for Microsoft Windows backed by Nullsoft, the creators of Winamp. NSIS is released under a
combination of free software licenses, primarily the zlib license.
Information
Last change to this tool card: 26 May 2020
Download this tool card in JSON format
All groups using tool NSIS
Changed Name Country Observed
APT groups
 Buhtrap, Ratopak Spider 2015-Jun 2019
 Cobalt Group 2016-Oct 2019
 RATicate [Unknown] 2019
3 groups listed (3 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=515cafb0-6567-4b4b-a6b1-a864d325411c
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=515cafb0-6567-4b4b-a6b1-a864d325411c
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=515cafb0-6567-4b4b-a6b1-a864d325411c
Page 2 of 2

 Cobalt RATicate Group [Unknown] 2016-Oct 2019 2019
3 groups listed (3 APT, 0 other, 0 unknown) 
   Page 1 of 2