Home > List all groups > List all tools > List all groups using tool Agent Racoon

Threat Group Cards: A Threat Actor Encyclopedia

Names	Agent Racoon
Category	Malware
Type	Backdoor
Description	(Palo Alto) This malware family is written using the .NET framework and leverages the domain name service (DNS) protocol to create a covert channel and provide different backdoor functionalities. Threat actors have used this along with the other two tools in multiple attacks targeting organizations across the U.S., Middle East and Africa. Its C2 infrastructure dates back to 2020.
Information	<https://unit42.paloaltonetworks.com/new-toolset-targets-middle-east-africa-usa/>

Last change to this tool card: 19 June 2024

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Operation Diplomatic Specter		2022

1 group listed (1 APT, 0 other, 0 unknown)

APT groups