Home > List all groups > List all tools > List all groups using tool PLANKWALK

Threat Group Cards: A Threat Actor Encyclopedia

Names	PLANKWALK
Category	Malware
Type	Backdoor
Description	(Mandiant) UNC2970 largely employs the PLANKWALK backdoor during phishing operations as well as other malware families that share code with multiple tools leveraged by UNC577.
Information	<https://www.mandiant.com/resources/blog/lightshow-north-korea-unc2970>

Last change to this tool card: 25 April 2023

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Lazarus Group, Hidden Cobra, Labyrinth Chollima		2007-May 2025

1 group listed (1 APT, 0 other, 0 unknown)

APT groups