Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 22:27:11 UTC Home > List all groups > List all tools > List all groups using tool DEADWOOD Tool: DEADWOOD Names DEADWOOD Detbosit DETBOSIT Agrius SQLShred Category Malware Type Wiper Description (SentinelLabs) Agrius also utilized DEADWOOD (aka ‘Detbosit’), a wiper malware written in C++ using the Boost libraries. This wiper was previously reported, although barely discussed compared to other Middle-Eastern wiper malware. According to publicly available information, it was involved in a wiping attack in Saudi Arabia in 2019. Information MITRE ATT&CK Malpedia Last change to this tool card: 27 December 2024 Download this tool card in JSON format All groups using tool DEADWOOD Changed Name Country Observed APT groups   Agrius 2020-May 2023   1 group listed (1 APT, 0 other, 0 unknown) https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f6865b31-78a2-45d8-b28c-46aa285542b6 Page 1 of 2 Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f6865b31-78a2-45d8-b28c-46aa285542b6 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f6865b31-78a2-45d8-b28c-46aa285542b6 Page 2 of 2 APT groups Agrius 2020-May 2023 1 group listed (1 APT, 0 other, 0 unknown) Page 1 of 2