| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | [] | 2024-12-20 | | | |
| | | Raccoon | ['Mohazo', 'RaccoonStealer', 'Racealer', 'Racoon'] | win.raccoon | [] | 2024-12-20 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2024-12-20 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2024-12-20 | | | |
| | | Mailto | ['Koko Ransomware', 'NetWalker'] | win.mailto | [] | 2022-04-07 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2024-05-23 | | | |
| | | magecart | [] | js.magecart | ['FIN6', 'MageCart'] | 2024-12-20 | | | |
| | | Glutton | [] | php.glutton | [] | 2024-12-20 | | | |
| | | PWNLNX | [] | elf.pwnlnx | [] | 2024-12-20 | | | |
| | | SSHDoor | [] | elf.sshdoor | [] | 2024-12-20 | | | |
| | | Ngioweb | [] | elf.ngioweb | ['Water Barghest'] | 2024-12-20 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2024-12-20 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2024-12-20 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2024-12-20 | | | |
| | | MiyaRAT | [] | win.miya_rat | ['HAZY TIGER'] | 2024-12-20 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2024-12-20 | | | |
| | | Winnti | [] | elf.winnti | ['Winnti Umbrella'] | 2024-12-20 | | | |
| | | Monokle | [] | apk.monokle | [] | 2024-12-09 | | | |
| | | PUMAKIT | ['PUMA', 'Kitsune'] | elf.pumakit | [] | 2024-12-13 | | | |
| | | WmRAT | [] | win.wm_rat | ['HAZY TIGER'] | 2024-12-17 | | | |
| | | Lynx | [] | win.lynx | [] | 2024-12-17 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2024-12-16 | | | |
| | | DEEPDATA | [] | win.deepdata | [] | 2024-12-16 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2024-12-16 | | | |
| | | PixPirate | [] | apk.pixpirate | [] | 2024-12-16 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2024-12-16 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2024-12-16 | | | |
| | | Mocky LNK | [] | win.mocky_lnk | ['APT28'] | 2024-12-16 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2024-12-16 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2024-12-13 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2024-12-11 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2024-12-16 | | | |
| | | SpyGrace | ['SpyGlace'] | win.spygrace | ['APT-C-60'] | 2024-12-16 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2024-12-16 | | | |
| | | OctoberSeventh | ['ESET Wiper'] | win.october_seventh | [] | 2024-12-16 | | | |
| | | BiBi | ['BiBi-Windows'] | win.bibi | ['Void Manticore'] | 2024-12-16 | | | |
| | | Careto | ['TheMask'] | win.careto | ['Careto'] | 2024-12-16 | | | |
| | | QuickHeal | [] | win.quickheal | [] | 2024-12-16 | | | |
| | | bugsleep | ['MuddyRot'] | win.bugsleep | [] | 2024-12-16 | | | |
| | | XenoRAT | [] | win.xenorat | [] | 2024-12-16 | | | |
| | | BeaverTail | [] | js.beavertail | [] | 2024-12-16 | | | |
| | | EagleMsgSpy | [] | apk.eagle_msg_spy | [] | 2024-12-13 | | | |
| | | BoneSpy | [] | apk.bone_spy | ['Gamaredon Group'] | 2024-12-13 | | | |
| | | PlainGnome | [] | apk.plain_gnome | ['Gamaredon Group'] | 2024-12-13 | | | |
| | | DroidWatcher | [] | apk.droidwatcher | [] | 2024-12-13 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2024-11-26 | | | |
| | | CEELOADER | [] | win.ceeloader | ['UNC2452'] | 2024-12-13 | | | |
| | | gokcpdoor | [] | elf.gokcpdoor | [] | 2024-12-13 | | | |
| | | Xloader | ['Formbook'] | osx.xloader | [] | 2024-12-13 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2024-12-13 | | | |
| | | Emmenhtal | ['IDATDropper', 'PEAKLIGHT'] | win.emmenhtal | [] | 2024-12-13 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2024-12-13 | | | |
| | | Zloader | ['DELoader', 'SILENTNIGHT', 'Terdot'] | win.zloader | [] | 2024-12-12 | | | |
| | | TwoDash | [] | win.twodash | ['Turla'] | 2024-12-12 | | | |
| | | Crimson RAT | ['SEEDOOR', 'Scarimson'] | win.crimson | ['Operation C-Major'] | 2024-12-12 | | | |
| | | COOKBOX | [] | ps1.cookbox | ['UAC-0149'] | 2024-12-11 | | | |
| | | Amadey | [] | win.amadey | [] | 2024-12-11 | | | |
| | | Wipbot | ['Epic', 'Tavdig'] | win.wipbot | ['Turla'] | 2024-12-11 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2024-12-11 | | | |
| | | SocksProxyGo | [] | win.socksproxygo | [] | 2024-12-11 | | | |
| | | CopperStealth | [] | win.copperstealth | ['Water Orthrus'] | 2024-12-11 | | | |
| | | CopperStealer | ['Mingloa'] | win.copper_stealer | [] | 2024-12-11 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | [] | 2024-12-11 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2024-12-11 | | | |
| | | SilentGh0st | [] | win.silentgh0st | [] | 2024-12-11 | | | |
| | | js.wd | [] | js.wd | [] | 2024-12-11 | | | |
| | | SEXi | ['Limpopo', 'Formosa', 'Socotra'] | elf.sexi | ['SEXi'] | 2024-12-11 | | | |
| | | RisePro | [] | win.risepro | [] | 2024-12-11 | | | |
| | | Vidar | [] | win.vidar | [] | 2024-12-11 | | | |
| | | MetaStealer | [] | win.metastealer | [] | 2024-12-11 | | | |
| | | PHOTOFORK | [] | win.photofork | [] | 2024-12-11 | | | |
| | | Vermin | [] | win.vermin | [] | 2024-12-11 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2024-12-11 | | | |
| | | Apostle | [] | win.apostle | ['Pink Sandstorm'] | 2024-12-11 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER'] | 2024-12-11 | | | |
| | | XWorm | [] | win.xworm | [] | 2024-12-11 | | | |
| | | DarkPink | [] | win.darkpink | [] | 2024-12-11 | | | |
| | | TinyTurla | [] | win.tiny_turla | ['Turla'] | 2023-10-05 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2024-12-09 | | | |
| | | Stealc | [] | win.stealc | [] | 2024-12-09 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2024-12-09 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2024-12-09 | | | |
| | | Redosdru | [] | win.redosdru | [] | 2024-12-09 | | | |
| | | Epsilon Stealer | [] | win.epsilon_stealer | [] | 2024-12-09 | | | |
| | | CustomerLoader | [] | win.customerloader | [] | 2024-12-09 | | | |
| | | Fabookie | [] | win.fabookie | [] | 2024-12-09 | | | |
| | | Nullmixer | [] | win.nullmixer | [] | 2024-12-09 | | | |
| | | PseudoManuscrypt | [] | win.pseudo_manuscrypt | [] | 2024-12-09 | | | |
| | | Koi Stealer | [] | win.koistealer | [] | 2024-12-09 | | | |
| | | Koi Loader | [] | win.koiloader | [] | 2024-12-09 | | | |
| | | HUI Loader | ['SIDESTEP'] | win.hui_loader | [] | 2024-12-09 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2024-12-09 | | | |
| | | Bootkitty | [] | elf.bootkitty | [] | 2024-12-09 | | | |
| | | MiniPocket | [] | win.minipocket | ['Turla'] | 2024-12-09 | | | |
| | | Wainscot | [] | win.wainscot | [] | 2024-12-09 | | | |
| | | BiBi-Linux | [] | elf.bibi_linux | ['Void Manticore'] | 2024-12-09 | | | |
| | | BloodAlchemy | [] | win.bloodalchemy | [] | 2024-12-09 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2024-12-09 | | | |
| | | FastCash | [] | aix.fastcash | ['Lazarus Group'] | 2024-12-09 | | | |
| | | PrivateLoader | [] | win.privateloader | [] | 2024-12-09 | | | |