Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 12:56:26 UTC
Home > List all groups > List all tools > List all groups using tool Swor
 Tool: Swor
Names Swor
Category Tools
Type Vulnerability scanner
Description
(Kaspersky) A simple penetration testing tool whose author tried to make it immune to
removal by security solutions. Based on its documentation, it can deploy Mimikatz, FRP and
ElevationStation. The tool is open-source and maintained by Chinese-speaking developers.
This tool was previously sighted being leveraged in attacks on government entities in
Malaysia, which is a similar industry vertical to the Middle East intrusion victimology.
Information Last change to this tool card: 23 October 2024
Download this tool card in JSON format
All groups using tool Swor
Changed Name Country Observed
APT groups
 Tropic Trooper, Pirate Panda, APT 23, KeyBoy 2011-Jun 2023
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0c9b3164-cdfc-451c-8d04-55ab8c9ebe44
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=0c9b3164-cdfc-451c-8d04-55ab8c9ebe44
Page 1 of 1