Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 14:57:54 UTC Home > List all groups > List all tools > List all groups using tool IronPython Tool: IronPython Names IronPython Category Tools Type Info stealer, Keylogger, Credential stealer Description IronPython is an open-source implementation of the Python programming language which is tightly integrated with the .NET Framework. IronPython can use the .NET Framework and Python libraries, and other .NET languages can use Python code just as easily. Information Last change to this tool card: 10 July 2020 Download this tool card in JSON format All groups using tool IronPython Changed Name Country Observed APT groups Evilnum [Unknown] 2018-2022 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6dd0166a-15d9-4790-a54f-9aceea304a0e https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=6dd0166a-15d9-4790-a54f-9aceea304a0e Page 1 of 1