Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 23:41:11 UTC
Home > List all groups > List all tools > List all groups using tool EarthWorm
 Tool: EarthWorm
Names
EarthWorm
SAMRID
Category Tools
Type Tunneling
Description Earthworm is an open source SOCKS tunneler.
Information AlienVault OTX Last change to this tool card: 19 June 2024
Download this tool card in JSON format
All groups using tool EarthWorm
Changed Name Country Observed
APT groups
 Calypso 2016-Aug 2021
 Earth Lusca 2019-Sep 2024
 Gelsemium 2014-2023
 Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon 2010-Oct 2024
 Velvet Ant 2023-Jul 2024
 Worok 2020
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5c5d41a7-03ee-4844-8c07-10a797daf762
Page 1 of 2

6 groups listed (6 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5c5d41a7-03ee-4844-8c07-10a797daf762
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5c5d41a7-03ee-4844-8c07-10a797daf762
Page 2 of 2