Home > List all groups > List all tools > List all groups using tool NinjaCopy

Threat Group Cards: A Threat Actor Encyclopedia

Names	NinjaCopy
Category	Malware
Type	Info stealer
Description	(Trend Micro) NinjaCopy is a hack tool that is well known for its ability to copy protected system files. Using the tool, threat actors can copy files off an NTFS volume by opening a read handle to the entire volume (such as c:) and parsing the NTFS structures.
Information	<https://www.trendmicro.com/en_us/research/24/k/breaking-down-earth-estries-persistent-ttps-in-prolonged-cyber-o.html>

Last change to this tool card: 26 December 2024

Download this tool card in JSON format

1 group listed (1 APT, 0 other, 0 unknown)

APT groups