Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:50:24 UTC
Home > List all groups > List all tools > List all groups using tool Shipshape
 Tool: Shipshape
Names Shipshape
Category Malware
Type Worm, Exfiltration
Description
SHIPSHAPE is malware developed by APT30 that allows propagation and exfiltration
of data over removable devices. APT30 may use this capability to exfiltrate data across
air-gaps.
Information
MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 23 April 2020
Download this tool card in JSON format
All groups using tool Shipshape
Changed Name Country Observed
APT groups
 APT 30, Override Panda 2005
 Naikon, Lotus Panda 2010-Apr 2022
2 groups listed (2 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=716fb64d-8dc0-4d92-96b6-60604a14aab2
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=716fb64d-8dc0-4d92-96b6-60604a14aab2
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=716fb64d-8dc0-4d92-96b6-60604a14aab2
Page 2 of 2

 APT Naikon, 30, Override Lotus Panda Panda 2005 2010-Apr 2022 
2 groups listed (2 APT, 0 other, 0 unknown) 
   Page 1 of 2