Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 13:46:48 UTC
Home > List all groups > List all tools > List all groups using tool PseudoManuscrypt
 Tool: PseudoManuscrypt
Names PseudoManuscrypt
Category Malware
Type Backdoor
Description
(Kaspersky) The PseudoManuscrypt loader makes its way onto user systems via a MaaS
platform that distributes malware in pirated software installer archives. One specific case of
the PseudoManuscrypt downloader’s distribution is its installation via the Glupteba botnet
(whose main installer is also distributed via the pirated software installer distribution
platform). This means that the malware distribution tactics used by the threat actor behind
PseudoManuscrypt demonstrate no particular targeting.
Information
Malpedia Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool PseudoManuscrypt
Changed Name Country Observed
APT groups
 Operation PseudoManuscrypt 2021
1 group listed (1 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1c5630e1-74a9-42ba-b5eb-a1e024c7c250
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1c5630e1-74a9-42ba-b5eb-a1e024c7c250
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1c5630e1-74a9-42ba-b5eb-a1e024c7c250
Page 2 of 2

APT groups Operation PseudoManuscrypt 2021 
1 group listed (1 APT, 0 other, 0 unknown) 
   Page 1 of 2