

 Tool: Grease
 Tool: Grease| Names | Grease | |
| Category | Malware | |
| Description | (Arbor) A tool to add a Windows administrator account with a specific username/password and enable RDP, circumventing any firewall rules. | |
| Information | <https://www.netscout.com/blog/asert/stolen-pencil-campaign-targets-academia> | |
| Malpedia | <https://malpedia.caad.fkie.fraunhofer.de/details/win.grease> | |
Last change to this tool card: 23 April 2020
Download this tool card in JSON format
| Changed | Name | Country | Observed | ||
| APT groups | |||||
| Kimsuky, Velvet Chollima |  | 2012-Aug 2025  |  | ||
1 group listed (1 APT, 0 other, 0 unknown)
| Digital Service Security Center Follow us on    | Report incidents | |
|  | +66 (0)2-123-1227 | |
|  | [email protected] | |