PowerShellRunner-based RPC backdoor - Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 22:47:12 UTC Home > List all groups > List all tools > List all groups using tool PowerShellRunner-based RPC backdoor Tool: PowerShellRunner-based RPC backdoor Names PowerShellRunner-based RPC backdoor PowerShellRunner Category Malware Type Backdoor Description No description available yet. Information Malpedia Last change to this tool card: 28 December 2022 Download this tool card in JSON format All groups using tool PowerShellRunner-based RPC backdoor Changed Name Country Observed APT groups Turla, Waterbug, Venomous Bear 1996-2024 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f764ab57-122e-4612-8d29-933eac0f47bd https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f764ab57-122e-4612-8d29-933eac0f47bd Page 1 of 1