Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:56:31 UTC
Home > List all groups > List all tools > List all groups using tool Aversome infector
 Tool: Aversome infector
Names Aversome infector
Category Malware
Type Backdoor, Worm
Description
(Kaspersky) In this case, we observed an interesting new second stage payload that includes
spreading capabilities, that we call “Aversome infector”. This malware seems to have been
developed to maintain a strong persistence in the target network and to move laterally by
infecting Microsoft Word and Excel documents on external drives.
Information Last change to this tool card: 01 May 2020
Download this tool card in JSON format
All groups using tool Aversome infector
Changed Name Country Observed
APT groups
 Gamaredon Group 2013-Feb 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a404ba82-faac-42e4-86d6-2f52e3984272
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a404ba82-faac-42e4-86d6-2f52e3984272
Page 1 of 1