Home > List all groups > List all tools > List all groups using tool Quickcafe

Threat Group Cards: A Threat Actor Encyclopedia

Names	Quickcafe
Category	Malware
Type	Downloader
Description	QUICKCAFE is an encrypted JavaScript downloader for PowerRatankba that exploits the ActiveX M2Soft vulnerabilities. QUICKCAFE is obfuscated using JavaScript Obfuscator.
Information	<https://www.proofpoint.com/sites/default/files/pfpt-us-wp-north-korea-bitten-by-bitcoin-bug.pdf>
Malpedia	<https://malpedia.caad.fkie.fraunhofer.de/details/js.quickcafe>

Last change to this tool card: 24 April 2021

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Lazarus Group, Hidden Cobra, Labyrinth Chollima		2007-May 2025

1 group listed (1 APT, 0 other, 0 unknown)

APT groups