Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 17:57:48 UTC
Home > List all groups > List all tools > List all groups using tool Moneybird
 Tool: Moneybird
Names Moneybird
Category Malware
Type Ransomware, Big Game Hunting
Description
(Check Point) Moneybird is a ransomware variant written in C++ associated with Agrius
operations. The name 'Moneybird' is contained in the malware's ransom note and as
strings in the executable.
Information
MITRE ATT&CK Last change to this tool card: 29 December 2024
Download this tool card in JSON format
All groups using tool Moneybird
Changed Name Country Observed
APT groups
 Agrius 2020-May 2023
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4984d292-a0ad-4d6f-ab3b-6a757d769f57
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4984d292-a0ad-4d6f-ab3b-6a757d769f57
Page 1 of 1