Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 23:02:54 UTC
Home > List all groups > List all tools > List all groups using tool WolfsBane
 Tool: WolfsBane
Names WolfsBane
Category Malware
Type Backdoor
Description
(ESET) As explained in the Attribution and connection and Technical analysis sections,
WolfsBane is a Linux equivalent of Gelsemium’s Gelsevirine backdoor and the WolfsBane
dropper is analogous to the Gelsemine dropper.
Information
Last change to this tool card: 26 December 2024
Download this tool card in JSON format
All groups using tool WolfsBane
Changed Name Country Observed
APT groups
 Gelsemium 2014-2023
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=572924b9-4cc2-4247-b8b4-1cb8b6c4cd6e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=572924b9-4cc2-4247-b8b4-1cb8b6c4cd6e
Page 1 of 1