Home > List all groups > List all tools > List all groups using tool LIGHTBOLT

Threat Group Cards: A Threat Actor Encyclopedia

Names	LIGHTBOLT
Category	Malware
Type	Backdoor
Description	LIGHTBOLT is a utility with the ability to perform HTTP GET requests for a list of user-specified URLs. The responses of the HTTP requests are then saved as MHTML files, which are added to encrypted RAR files. LIGHTBOLT has the ability to use software certificates for authentication.
Information	<http://contagiodump.blogspot.com/2013/03/mandiant-apt1-samples-categorized-by.html>

Last change to this tool card: 20 April 2020

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups