Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-06 00:08:04 UTC Home > List all groups > List all tools > List all groups using tool agfSpy Tool: agfSpy Names agfSpy Category Malware Type Backdoor Description The agfSpy backdoor retrieves configuration and commands from its C&C server. These commands allow the backdoor to execute shell commands and send the execution results back to the server. It also enumerates directories and can list, upload, download, and execute files, among other functions. The capabilities of agfSpy are very similar to dneSpy, except each backdoor uses a different C&C server and various formats in message exchanges. Information Malpedia Last change to this tool card: 29 December 2022 Download this tool card in JSON format All groups using tool agfSpy Changed Name Country Observed APT groups   Operation Earth Kitsune 2019-Late 2022   1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20206555-8dd2-4fbe-b878-7edba075b872 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20206555-8dd2-4fbe-b878-7edba075b872 Page 1 of 1