Home > List all groups > List all tools > List all groups using tool GRILLMARK

Threat Group Cards: A Threat Actor Encyclopedia

Names	GRILLMARK Hellsing Backdoor
Category	Malware
Type	Backdoor
Description	This is a proxy-aware HTTP backdoor that is implemented as a service and uses the compromised system's proxy settings to access the internet. C&C traffic is base64 encoded and the files sent to the server are compressed with aPLib.
Information	<https://docplayer.net/5013762-Fireeye-threat-intelligence-southeast-asia-an-evolving-cyber-threat-landscape-security-reimagined-march-2015.html>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/win.grillmark>

Last change to this tool card: 24 April 2021

Download this tool card in JSON format

Previous: Griffon
Next: GrimPlant

Changed	Name	Country	Observed
APT groups
	Leviathan, APT 40, TEMP.Periscope		2013-Jul 2021

1 group listed (1 APT, 0 other, 0 unknown)

APT groups