Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 22:59:55 UTC Home > List all groups > List all tools > List all groups using tool Socat Tool: Socat Names Socat Category Tools Type Tunneling Description Socat is a command line based utility that establishes two bidirectional byte streams and transfers data between them. Because the streams can be constructed from a large set of different types of data sinks and sources (see address types), and because lots of address options may be applied to the streams, socat can be used for many different purposes. Information Last change to this tool card: 29 November 2023 Download this tool card in JSON format All groups using tool Socat Changed Name Country Observed APT groups       ↳ Subgroup: Scattered Spider [Unknown] 2022-Aug 2025 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=918f02df-3f44-48f9-8e05-90c849c5484a https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=918f02df-3f44-48f9-8e05-90c849c5484a Page 1 of 1