Home > List all groups > List all tools > List all groups using tool SessionGopher

Threat Group Cards: A Threat Actor Encyclopedia

Names	SessionGopher
Category	Tools
Type	Credential stealer
Description	SessionGopher is a PowerShell tool that finds and decrypts saved session information for remote access tools. It has WMI functionality built in so it can be run remotely. Its best use case is to identify systems that may connect to Unix systems, jump boxes, or point-of-sale terminals.
Information	<https://github.com/Arvanaghi/SessionGopher>

Last change to this tool card: 24 June 2020

Download this tool card in JSON format

Changed	Name	Country	Observed
APT groups
	Wizard Spider, Gold Blackburn		2014-Dec 2023

1 group listed (1 APT, 0 other, 0 unknown)

APT groups