
| Names | AntSword | |
| Category | Malware | |
| Type | Backdoor | |
| Description | (Trend Micro) AntSword is a successor of the China Chopper web shell that integrates more features compared to other web shell management tools. Perhaps its unique selling point is its plugin store, where a user can enhance its functions via additional plugins. | |
| Information | <https://www.trendmicro.com/content/dam/trendmicro/global/en/research/22/a/earth-lusca-employs-sophisticated-infrastructure-varied-tools-and-techniques/technical-brief-delving-deep-an-analysis-of-earth-lusca-operations.pdf> | |
Last change to this tool card: 25 January 2022
Download this tool card in JSON format
| Changed | Name | Country | Observed | ||
APT groups | |||||
| APT 41 | 2012-Jul 2025 | ![]() | |||
| Dalbit | 2022 | ||||
| Earth Lusca | 2019-Sep 2024 | ||||
3 groups listed (3 APT, 0 other, 0 unknown)
|
Digital Service Security Center Follow us on |
Report incidents |
|
| +66 (0)2-123-1227 | ||
| [email protected] | ||