Home > List all groups > List all tools > List all groups using tool VeilShell

Threat Group Cards: A Threat Actor Encyclopedia

Names	VeilShell
Category	Malware
Type	Backdoor
Description	(Securonix) Executed by the Javascript eval() function is a single large PowerShell one-liner. The script serves as a backdoor/RAT (Remote Access Trojan), allowing an attacker to control the victim’s system remotely.
Information	<https://www.securonix.com/blog/shroudedsleep-a-deep-dive-into-north-koreas-ongoing-campaign-against-southeast-asia/>

Last change to this tool card: 24 October 2024

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Reaper, APT 37, Ricochet Chollima, ScarCruft		2012-Sep 2024

1 group listed (1 APT, 0 other, 0 unknown)

APT groups