Home > List all groups > List all tools > List all groups using tool GravityAdmin

Threat Group Cards: A Threat Actor Encyclopedia

Names	GravityAdmin
Category	Malware
Type	Control panel
Description	(Talos) A tool to administer infected systems (panel binary), used by operators since at least 2021, by connecting to GravityRAT’s and HeavyLift’s C2 servers. GravityAdmin consists of multiple inbuilt User Interfaces (UIs) that correspond to specific, codenamed, campaigns being operated by malicious operators.
Information	<https://blog.talosintelligence.com/cosmic-leopard/>

Last change to this tool card: 19 June 2024

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Cosmic Leopard, Operation Celestial Force		2018

1 group listed (1 APT, 0 other, 0 unknown)

APT groups