Threat Group Cards: A Threat Actor Encyclopedia

Names	ToddyCat (Kaspersky)
Country	[Unknown]
Motivation	Information theft and espionage
First seen	2020
Description	(Kaspersky) ToddyCat is a relatively new APT actor that we have not been able to relate to other known actors, responsible for multiple sets of attacks detected since December 2020 against high-profile entities in Europe and Asia. We still have little information about this actor, but we know that its main distinctive signs are two formerly unknown tools that we call ‘Samurai backdoor’ and ‘Ninja Trojan’.
Observed	Countries: Afghanistan, India, Indonesia, Iran, Kyrgyzstan, Malaysia, Pakistan, Russia, Slovakia, Taiwan, Thailand, UK, Uzbekistan, Vietnam.
Tools used	China Chopper, Ninja, Samurai.
Information	<https://securelist.com/toddycat/106799/>

Last change to this card: 19 July 2022

Download this actor card in PDF or JSON format