Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:38:42 UTC
Home > List all groups > List all tools > List all groups using tool LIGHTSHIFT
 Tool: LIGHTSHIFT
Names LIGHTSHIFT
Category Malware
Type Dropper
Description (Mandiant) LIGHTSHIFT is an in-memory only dropper.
Information <https://www.mandiant.com/resources/blog/lightshift-and-lightshow>
Last change to this tool card: 25 April 2023
Download this tool card in JSON format
All groups using tool LIGHTSHIFT
Changed Name Country Observed
APT groups
  Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=993255dd-d04a-43ba-af6f-704829a3cbe1
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=993255dd-d04a-43ba-af6f-704829a3cbe1
Page 1 of 1