| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2026-09-25 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-09-25 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2026-09-25 | | | |
| | | Koi Loader | [] | win.koiloader | [] | 2026-09-25 | | | |
| | | XoriumStealer | [] | win.xoriumstealer | [] | 2026-09-25 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2026-09-25 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2026-09-25 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2026-09-25 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-09-25 | | | |
| | | oxloader | [] | win.oxloader | [] | 2026-09-25 | | | |
| | | VIP Keylogger | [] | win.vipkeylogger | [] | 2026-09-25 | | | |
| | | Potassium | [] | elf.potassium | [] | 2026-09-25 | | | |
| | | Drifter | ['Dongfeng'] | elf.drifter | [] | 2026-09-25 | | | |
| | | Amadey | [] | win.amadey | [] | 2026-09-25 | | | |
| | | BeaverTail | [] | osx.beavertail | ['WageMole'] | 2026-09-24 | | | |
| | | Beavertail | [] | win.beavertail | ['WageMole'] | 2026-09-24 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2026-09-24 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-09-24 | | | |
| | | ForestTiger | ['ScoringMathTea'] | win.forest_tiger | ['Lazarus Group'] | 2026-09-24 | | | |
| | | FudModule | ['LIGHTSHOW'] | win.fudmodule | ['Lazarus Group'] | 2026-09-24 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2026-09-24 | | | |
| | | SeroRAT | [] | win.sero_rat | [] | 2026-09-24 | | | |
| | | LightlessCan | ['SIDESHOW'] | win.lightlesscan | ['Lazarus Group'] | 2026-09-24 | | | |
| | | Gaslight | [] | osx.gaslight | [] | 2026-09-24 | | | |
| | | Bankshot | ['COPPERHEDGE', 'FoggyBrass'] | win.bankshot | ['Lazarus Group'] | 2026-09-24 | | | |
| | | Gunra | [] | win.gunra | [] | 2026-09-24 | | | |
| | | PostNapTea | ['SIGNBT'] | win.postnaptea | ['Lazarus Group'] | 2026-09-24 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2026-09-24 | | | |
| | | KillDisk | [] | win.killdisk | ['Sandworm', 'TeleBots'] | 2026-09-24 | | | |
| | | Maui Ransomware | [] | win.maui | ['Silent Chollima'] | 2026-09-24 | | | |
| | | SiennaBlue | ['HolyLocker', 'H0lyGh0st'] | win.sienna_blue | [] | 2026-09-24 | | | |
| | | SiennaPurple | ['HolyLocker', 'H0lyGh0st'] | win.sienna_purple | [] | 2026-09-24 | | | |
| | | WannaCryptor | ['Wana Decrypt0r', 'WannaCry', 'WannaCrypt', 'Wcry'] | win.wannacryptor | ['Lazarus Group'] | 2026-09-24 | | | |
| | | Qilin | [] | elf.qilin | [] | 2026-09-24 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2026-09-22 | | | |
| | | Headlace | [] | win.headlace | [] | 2026-09-22 | | | |
| | | Mirai | [] | win.mirai | [] | 2026-09-22 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2026-09-22 | | | |
| | | Jackskid | ['RCtea'] | elf.jackskid | [] | 2026-09-22 | | | |
| | | Babuk | ['Babyk', 'Vasa Locker'] | win.babuk | [] | 2026-09-22 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2026-09-22 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-09-22 | | | |
| | | SparrowDoor | [] | win.sparrow_door | ['GhostEmperor'] | 2026-09-22 | | | |
| | | Pteranodon | ['Pterodo'] | win.pteranodon | ['Gamaredon Group', 'Operation Armageddon'] | 2026-09-22 | | | |
| | | KillAV | ['BURNTCIGAR'] | win.killav | [] | 2026-09-22 | | | |
| | | Gentlemen | [] | win.gentlemen | ['The Gentlemen'] | 2026-09-22 | | | |
| | | CECbot | [] | apk.cecbot | [] | 2026-08-31 | | | |
| | | Lorem Ipsum | ['AxolotlLoader', 'OAKGLINT'] | win.lorem_ipsum | [] | 2026-09-07 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-09-16 | | | |
| | | Metamorfo | ['Casbaneiro'] | win.metamorfo | [] | 2026-09-16 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT10', 'APT32', 'Anunak', 'GALLIUM'] | 2026-09-14 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2026-09-14 | | | |
| | | Behinder | [] | php.behinder | [] | 2026-09-14 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2026-09-14 | | | |
| | | MINOCAT | [] | elf.minocat | [] | 2026-09-14 | | | |
| | | COMPOOD | [] | elf.compood | [] | 2026-09-14 | | | |
| | | XMRIG | [] | elf.xmrig | [] | 2026-09-14 | | | |
| | | EtherRAT | [] | js.ether_rat | [] | 2026-09-14 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-09-14 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-09-14 | | | |
| | | VShell | [] | win.vshell | [] | 2026-09-14 | | | |
| | | xmrig | [] | win.xmrig | [] | 2026-09-14 | | | |
| | | HackBrowserData | [] | win.hackbrowserdata | [] | 2026-09-14 | | | |
| | | GoToHTTP | [] | win.gotohttp | [] | 2026-09-14 | | | |
| | | Monero Miner | ['CoinMiner'] | win.monero_miner | [] | 2026-09-14 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2026-09-14 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2026-09-14 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2026-09-14 | | | |
| | | Koktevrat | [] | apk.koktevrat | [] | 2026-09-14 | | | |
| | | LxBase RAT | [] | win.lxbaserat | [] | 2026-09-14 | | | |
| | | win.beast | ['blacklockbit'] | win.beast | [] | 2026-09-07 | | | |
| | | CASTLESTEALER | [] | win.castle_stealer | [] | 2026-09-07 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-09-07 | | | |
| | | StoatWaffle | [] | js.stoatwaffle | [] | 2026-09-07 | | | |
| | | ZimReaper | [] | js.zimreaper | ['Void Blizzard'] | 2026-09-07 | | | |
| | | Nasty | [] | elf.nasty | [] | 2026-09-07 | | | |
| | | Akira | ['REDBIKE'] | elf.akira | ['Storm-1567'] | 2026-09-07 | | | |
| | | Rhysida | [] | elf.rhysida | ['Vanilla Tempest'] | 2026-09-07 | | | |
| | | BlackByte | [] | win.blackbyte | [] | 2026-09-07 | | | |
| | | BlueSky | [] | win.bluesky | [] | 2026-09-07 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2026-09-07 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2026-09-07 | | | |
| | | Spyder | [] | win.spyder | [] | 2026-09-07 | | | |
| | | Rhysida | [] | win.rhysida | ['Vanilla Tempest'] | 2026-09-07 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2026-09-07 | | | |
| | | INC | [] | win.inc | [] | 2026-09-07 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2026-09-07 | | | |
| | | INC | [] | elf.inc | ['Storm-0494', 'Vanilla Tempest'] | 2026-09-07 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-09-07 | | | |
| | | EvilQuest | ['ThiefQuest'] | osx.evilquest | [] | 2026-09-07 | | | |
| | | FlashBack | ['FakeFlash'] | osx.flashback | [] | 2026-09-07 | | | |
| | | XCSSET | [] | osx.xcsset | [] | 2026-09-07 | | | |
| | | Shlayer | [] | osx.shlayer | [] | 2026-09-07 | | | |
| | | RevStealer | [] | win.revstealer | [] | 2026-09-07 | | | |
| | | POORTRY | [] | win.poortry | [] | 2026-09-07 | | | |
| | | NightLedger | [] | win.nightledger | [] | 2026-09-07 | | | |
| | | Malterminal | [] | win.malterminal | [] | 2026-09-07 | | | |
| | | Remus | [] | win.remus | [] | 2026-09-07 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2026-09-07 | | | |