Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 14:56:23 UTC
Home > List all groups > List all tools > List all groups using tool BlackSmith
 Tool: BlackSmith
Names BlackSmith
Category Malware
Type Backdoor, Info stealer
Description
(Proofpoint) With BlackSmith, TA453 has created a sophisticated intelligence collection
toolkit and streamlined its malware functions from a disparate set of individual scripts into a
full-service PowerShell trojan.
Information
<https://www.proofpoint.com/us/blog/threat-insight/best-laid-plans-ta453-targets-religious-figure-fake-podcast-invite-delivering>
Last change to this tool card: 27 August 2024
Download this tool card in JSON format
All groups using tool BlackSmith
Changed Name Country Observed
APT groups
  Magic Hound, APT 35, Cobalt Illusion, Charming Kitten 2012-Jun 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=87eb68be-5b44-4229-9357-89986d18e5e0
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=87eb68be-5b44-4229-9357-89986d18e5e0
Page 1 of 1