Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 16:42:23 UTC
Home > List all groups > List all tools > List all groups using tool GravityAdmin
 Tool: GravityAdmin
Names GravityAdmin
Category Malware
Type Control panel
Description
(Talos) A tool to administer infected systems (panel binary), used by operators since at least
2021, by connecting to GravityRAT’s and HeavyLift’s C2 servers. GravityAdmin consists of
multiple inbuilt User Interfaces (UIs) that correspond to specific, codenamed, campaigns being
operated by malicious operators.
Information Last change to this tool card: 19 June 2024
Download this tool card in JSON format
All groups using tool GravityAdmin
Changed Name Country Observed
APT groups
 Cosmic Leopard, Operation Celestial Force 2018
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bf7e9c1-92e8-40ae-8bbf-7716e2feec5e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=8bf7e9c1-92e8-40ae-8bbf-7716e2feec5e
Page 1 of 1