Skip to content
brandefense.io
Request A Demo
UnclassifiedUnknown

Witchetty

Witchetty is a China-attributed threat actor group, tracked by Brandefense.

Also known as
  • LookingFrog
Request IOC feedRequest ATT&CK export
Origin
China
Techniques
0
Exploited CVEs
No CVE data
Record updated

About Witchetty.

Witchetty’s activity was characterized by the use of two pieces of malware, a first-stage backdoor known as X4 and a second-stage payload known as LookBack.

Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.