Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 20:56:20 UTC Home > List all groups > List all tools > List all groups using tool NETWoolger Tool: NETWoolger Names NETWoolger Category Malware Type Keylogger Description (Check Point) a .NET based ‘woolen key-logger.’ This malware is functionally similar to CWoolger. The attackers seem to use them interchangeably, as alternate infection mechanisms (in case one is detected at the victim computer). Information Last change to this tool card: 08 May 2020 Download this tool card in JSON format All groups using tool NETWoolger Changed Name Country Observed APT groups   Magic Hound, APT 35, Cobalt Illusion, Charming Kitten 2012-Jun 2025 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=772ccf01-c771-488d-a649-41ee1bcbbc8a https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=772ccf01-c771-488d-a649-41ee1bcbbc8a Page 1 of 1