Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 22:59:19 UTC
Home > List all groups > List all tools > List all groups using tool TFlower
 Tool: TFlower
Names TFlower
Category Malware
Type Ransomware
Description
(Sygnia) The TFlower ransomware campaign was covered by several technology news
websites between September and November of 2019. However, since then very little
information has been made public about the ransomware group or its operations.
Information
Malpedia Last change to this tool card: 24 April 2021
Download this tool card in JSON format
All groups using tool TFlower
Changed Name Country Observed
APT groups
 Lazarus Group, Hidden Cobra, Labyrinth Chollima 2007-May 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=feb855ea-0955-453e-a11d-c3678ee7e308
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=feb855ea-0955-453e-a11d-c3678ee7e308
Page 1 of 1