Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 03:22:44 UTC
Home > List all groups > List all tools > List all groups using tool AntSword
 Tool: AntSword
Names AntSword
Category Malware
Type Backdoor
Description
(Trend Micro) AntSword is a successor of the China Chopper web shell that integrates more
features compared to other web shell management tools. Perhaps its unique selling point is its
plugin store, where a user can enhance its functions via additional plugins.
Information
<https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/a/earth-lusca-employs-sophisticated-infrastructure-varied-tools-and-techniques/technical-brief-delving-deep-an-analysis-of-earth-lusca-operations.pdf>
Last change to this tool card: 25 January 2022
Download this tool card in JSON format
All groups using tool AntSword
Changed Name Country Observed
APT groups
  APT 41 2012-Jul 2025
  Dalbit 2022  
  Earth Lusca 2019-Sep 2024  
3 groups listed (3 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9efe2cc2-7c37-4692-9d1b-9f34521ebae4
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9efe2cc2-7c37-4692-9d1b-9f34521ebae4
Page 1 of 1