Network Password Recovery - Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 19:42:17 UTC Home > List all groups > List all tools > List all groups using tool Network Password Recovery Tool: Network Password Recovery Names Network Password Recovery Category Tools Type Credential stealer Description When you connect to a network share on your LAN or to your .NET Passport account, Windows allows you to save your password in order to use it in each time that you connect the remote server. This utility recovers all network passwords stored on your system for the current logged-on user. It can also recover the passwords stored in Credentials file of external drive, as long as you know the last log-on password. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool Network Password Recovery Changed Name Country Observed APT groups   Kimsuky, Velvet Chollima 2012-Aug 2025   Traveling Spider [Unknown] 2019-Mar 2021     XDSpy [Unknown] 2011-Jul 2024   3 groups listed (3 APT, 0 other, 0 unknown) https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=84415af1-cc63-4639-aad5-4935751e3e25 Page 1 of 2 Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=84415af1-cc63-4639-aad5-4935751e3e25 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=84415af1-cc63-4639-aad5-4935751e3e25 Page 2 of 2 Traveling XDSpy Spider [Unknown] [Unknown] 2019-Mar 2011-Jul 2021 2024 3 groups listed (3 APT, 0 other, 0 unknown) Page 1 of 2