| | | PureMiner | [] | win.pureminer | [] | 2026-08-03 | | | |
| | | AnimateClipper | [] | win.animate_clipper | [] | 2026-08-03 | | | |
| | | 1337_GTWK | [] | elf.1337_gtwk_rootkit | [] | 2026-08-03 | | | |
| | | Gunra | [] | win.gunra | [] | 2026-08-03 | | | |
| | | Remus | [] | win.remus | [] | 2026-08-03 | | | |
| | | ChocoShell | [] | ps1.choco_shell | ['APT29'] | 2026-08-03 | | | |
| | | CornFlake | [] | win.cornflake | ['APT29'] | 2026-08-03 | | | |
| | | MetaStealer | [] | win.metastealer | ['UNC5537'] | 2026-07-31 | | | |
| | | Potemkin | [] | win.potemkin | [] | 2026-07-31 | | | |
| | | Chisel | [] | win.chisel | [] | 2026-07-31 | | | |
| | | EtherRAT | [] | js.ether_rat | [] | 2026-07-31 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-07-20 | | | |
| | | JADESNOW | ['ChainedDown'] | js.jadesnow | ['WageMole'] | 2026-07-30 | | | |
| | | TriangleDB | [] | ios.triangledb | [] | 2026-07-28 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2026-07-28 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2026-07-28 | | | |
| | | zgRAT | [] | win.zgrat | [] | 2026-07-28 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-07-28 | | | |
| | | Venom RAT | [] | win.venom | [] | 2026-07-28 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2026-07-28 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2026-07-28 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2026-07-28 | | | |
| | | Jackskid | ['RCtea'] | elf.jackskid | [] | 2026-07-27 | | | |
| | | VoidStealer | [] | win.voidstealer | [] | 2026-07-27 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2026-07-27 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2026-07-27 | | | |
| | | ZimReaper | [] | js.zimreaper | ['Void Blizzard'] | 2026-07-24 | | | |
| | | SpyPress | [] | js.spypress | ['APT28'] | 2026-07-24 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2026-07-24 | | | |
| | | Hopeless | [] | win.hopeless | [] | 2026-07-22 | | | |
| | | TriBack Loader | [] | win.triback_loader | [] | 2026-07-24 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2026-07-24 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2026-07-24 | | | |
| | | INC | [] | win.inc | [] | 2026-07-22 | | | |
| | | INC | [] | elf.inc | ['Storm-0494', 'Vanilla Tempest'] | 2026-07-22 | | | |
| | | MonsterV2 | ['Aurotun Stealer'] | win.monsterv2 | [] | 2026-07-22 | | | |
| | | TONESHELL | [] | win.toneshell | ['MUSTANG PANDA'] | 2026-07-22 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2026-07-22 | | | |
| | | fast16 | [] | win.fast16 | [] | 2026-07-22 | | | |
| | | Ousaban | [] | win.ousaban | [] | 2026-07-13 | | | |
| | | KongTuke | ['TAG-124', 'js.LandUpdate808'] | js.kongtuke | [] | 2026-07-21 | | | |
| | | ModeloRAT | [] | py.modelorat | [] | 2026-07-21 | | | |
| | | MacSync | [] | osx.macsync | [] | 2026-07-21 | | | |
| | | SnappyClient | ['SilabRAT'] | win.snappy_client | [] | 2026-07-21 | | | |
| | | TonRAT | ['TONResolver'] | js.tonrat | [] | 2026-07-20 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-07-01 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | OtterCandy | ['HardHatRAT', 'UNSEENMINK'] | js.ottercandy | ['WageMole'] | 2026-07-17 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2026-07-16 | | | |
| | | Daxin | ['DELIMEAT'] | win.daxin | [] | 2026-07-16 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-06-29 | | | |
| | | RevStealer | [] | win.revstealer | [] | 2026-07-14 | | | |
| | | IceCube | [] | js.icecube | [] | 2026-07-13 | | | |
| | | LONGLEASH | [] | elf.longleash | [] | 2026-07-13 | | | |
| | | JARLEASH | [] | jar.jarleash | [] | 2026-07-13 | | | |
| | | DOGLEASH | [] | elf.dogleash | [] | 2026-07-13 | | | |
| | | Shai-Hulud | [] | js.shai_hulud | [] | 2026-07-07 | | | |
| | | MINIRECON | [] | win.minirecon | ['MUSTANG PANDA'] | 2026-07-02 | | | |
| | | ZOHOMURK | [] | win.zohomurk | ['MUSTANG PANDA'] | 2026-07-01 | | | |
| | | XehookStealer | [] | win.xehook | [] | 2026-07-01 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2026-07-01 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2026-07-01 | | | |
| | | Reshell | [] | win.reshell | ['GALLIUM'] | 2026-07-01 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-07-01 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2026-07-01 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2026-07-01 | | | |
| | | 8Base | [] | win.8base | [] | 2026-07-01 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2026-07-01 | | | |
| | | GOREVERSE | [] | elf.goreverse | ['UNC5174'] | 2026-07-01 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-07-01 | | | |
| | | Sliver | [] | win.sliver | [] | 2026-07-01 | | | |
| | | Amadey | [] | win.amadey | [] | 2026-07-01 | | | |
| | | BUSHWALK | [] | elf.bushwalk | [] | 2026-06-30 | | | |
| | | PITSOCK | [] | elf.pitsock | [] | 2026-06-30 | | | |
| | | PITHOOK | [] | elf.pithook | [] | 2026-06-30 | | | |
| | | PITFUEL | [] | elf.pitfuel | [] | 2026-06-30 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-06-30 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | ['Vanilla Tempest'] | 2026-06-30 | | | |
| | | Babadeda | [] | win.babadeda | [] | 2026-06-30 | | | |
| | | SystemBC | [] | elf.systembc | [] | 2026-06-30 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2026-06-30 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2026-06-30 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2026-06-30 | | | |
| | | Akira | ['REDBIKE'] | elf.akira | ['Storm-1567'] | 2026-06-30 | | | |
| | | Socks5Systemz | ['ProxyBox'] | win.socks5_systemz | [] | 2026-06-29 | | | |
| | | Showboat | [] | elf.showboat | [] | 2026-06-29 | | | |
| | | Unidentified 125 (RAT, Dropping Elephant) | [] | win.unidentified_125 | ['QUILTED TIGER'] | 2026-06-25 | | | |
| | | SprySOCKS | [] | win.sprysocks | ['Earth Lusca'] | 2026-06-25 | | | |
| | | MLTBackdoor | [] | win.mltbackdoor | [] | 2026-06-25 | | | |
| | | Gaslight | [] | osx.gaslight | [] | 2026-06-25 | | | |
| | | Keenadu | [] | apk.keenadu | [] | 2026-06-25 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2026-06-25 | | | |
| | | Lorem Ipsum | [] | win.lorem_ipsum | [] | 2026-06-25 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2026-06-24 | | | |
| | | PylangGhost | ['ICEBITE.PYTHON', 'WeaselStore'] | py.pylangghost | ['WageMole'] | 2026-06-24 | | | |
| | | CASTLESTEALER | [] | win.castle_stealer | [] | 2026-06-24 | | | |
| | | SolarisLoader | [] | win.solaris_loader | [] | 2026-06-24 | | | |
| | | oxloader | [] | win.oxloader | [] | 2026-06-23 | | | |
| | | MASOL | [] | win.masol | [] | 2026-06-23 | | | |
| | | GraphicalNeutrino | ['SNOWYAMBER'] | win.graphical_neutrino | ['APT29'] | 2023-07-28 | | | |