Home > List all groups > List all tools > List all groups using tool Gon

Threat Group Cards: A Threat Actor Encyclopedia

Names	Gon
Category	Malware
Type	Reconnaissance, Remote command, Info stealer, Exfiltration
Description	(Palo Alto) At a high level, the Gon tool allows the actor to scan for open ports on remote systems, upload and download files, take screenshots, find other systems on the network, run commands on remote systems and create a Remote Desktop Protocol (RDP) session. The actor can use Gon as a command-line utility or by using a Graphical User Interface (GUI).
Information	<https://unit42.paloaltonetworks.com/xhunt-campaign-attacks-on-kuwait-shipping-and-transportation-organizations/>

Last change to this tool card: 29 April 2020

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups