Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 20:18:36 UTC
Home > List all groups > List all tools > List all groups using tool CreepySnail
 Tool: CreepySnail
Names CreepySnail
Category Malware
Type Backdoor
Description
(ESET) CreepySnail is another PowerShell backdoor that sends HTTP requests to a
C&C server and receives and executes PowerShell commands. We saw various versions
of this backdoor in the wild, though the differences between them were minimal.
Information MITRE ATT&CK Malpedia Last change to this tool card: 22 June 2023
Download this tool card in JSON format
All groups using tool CreepySnail
Changed Name Country Observed
APT groups
 Polonium 2022-Sep 2022
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=18fb29a2-baae-4d98-9f8f-0d60f4a29cdd
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=18fb29a2-baae-4d98-9f8f-0d60f4a29cdd
Page 1 of 1