HOMETHREATSTSCookie
APT / THREAT GROUP

TSCookie

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: elf.tscookie

Threat Analysis

TSCookie is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blogs.jpcert.or.jp/en/2020/03/elf-tscookie.html
→https://jp.security.ntt/resources/EN-BlackTech_2021.pdf
→https://jsac.jpcert.or.jp/archive/2020/pdf/JSAC2020_0_JPCERT_en.pdf
→https://summit.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf
→https://twitter.com/ESETresearch/status/1382054011264700416

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

TSCookieelf.tscookie

External Intelligence

Malpedia: elf.tscookie

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search TSCookie