| | | LazyWiper | [] | ps1.lazywiper | [] | 2026-01-30 | | | |
| | | DynoWiper | [] | win.dynowiper | [] | 2026-01-30 | | | |
| | | IClickFix | [] | js.iclickfix | [] | 2026-01-30 | | | |
| | | Interlock | [] | win.interlock | [] | 2026-01-30 | | | |
| | | PylangGhost | [] | py.pylangghost | ['WageMole'] | 2026-01-21 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-01-27 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2026-01-29 | | | |
| | | SloppyMIO | [] | win.sloppy_mio | [] | 2026-01-29 | | | |
| | | GhostChat | [] | apk.ghost_chat | [] | 2026-01-29 | | | |
| | | SHEETCREEP | [] | win.sheetcreep | [] | 2026-01-29 | | | |
| | | MAILCREEP | [] | win.mailcreep | [] | 2026-01-29 | | | |
| | | GRAYRABBIT | [] | win.grayrabbit | ['UNC3569'] | 2026-01-28 | | | |
| | | HelloBot | [] | win.hellobot | ['Earth Berberoka'] | 2026-01-28 | | | |
| | | HUI Loader | ['SIDESTEP'] | win.hui_loader | [] | 2026-01-28 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2026-01-28 | | | |
| | | SiestaGraph | ['DRAFTGRAPH'] | win.siesta_graph | [] | 2026-01-28 | | | |
| | | KEYPLUG | ['ELFSHELF'] | elf.keyplug | ['APT41'] | 2026-01-28 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-01-28 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2026-01-28 | | | |
| | | PeckBirdy | [] | js.peckbirdy | [] | 2026-01-28 | | | |
| | | JelusRAT | [] | win.jelus_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | GopherRAT | [] | win.gopher_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | PetitPotato | [] | win.petit_potato | ['Silent Chollima'] | 2026-01-27 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2026-01-27 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2026-01-27 | | | |
| | | Kimwolf | [] | apk.kimwolf | [] | 2026-01-27 | | | |
| | | Hakuna Matata | [] | win.hakuna_matata | [] | 2026-01-27 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2026-01-27 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT17', 'APT23', 'APT41', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA', 'Webworm'] | 2026-01-27 | | | |
| | | SNAPPYBEE | ['Deed RAT', 'POISONPLUG.DEED'] | win.snappybee | ['Earth Estries'] | 2026-01-27 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2026-01-27 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2026-01-27 | | | |
| | | VoidLink | [] | elf.voidlink | [] | 2026-01-27 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2026-01-27 | | | |
| | | Amnesia RAT | [] | py.amnesia_rat | [] | 2026-01-27 | | | |
| | | OtterCandy | ['HardHatRAT', 'UNSEENMINK'] | js.ottercandy | [] | 2026-01-27 | | | |
| | | ResidentBat | [] | apk.residentbat | [] | 2026-01-27 | | | |
| | | Amatera | [] | win.amatera | [] | 2026-01-27 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-01-27 | | | |
| | | HOMESTEEL | [] | vbs.homesteel | [] | 2026-01-26 | | | |
| | | WRECKSTEEL | [] | ps1.wrecksteel | [] | 2026-01-26 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2026-01-26 | | | |
| | | Vampire Bot | [] | win.vampire_bot | [] | 2026-01-26 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2026-01-26 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2026-01-26 | | | |
| | | SmartApeSG | ['HANEYMANEY', 'ZPHP'] | js.smartapesg | [] | 2026-01-21 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2026-01-21 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-01-21 | | | |
| | | Singularity | [] | elf.singularity | [] | 2026-01-21 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2026-01-21 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2026-01-21 | | | |
| | | GolangGhost | ['BitStep RAT', 'WeaselStore'] | win.golangghost | ['WageMole'] | 2026-01-21 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-01-20 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2026-01-19 | | | |
| | | Predator | ['PREYHUNTER'] | ios.predator | [] | 2026-01-19 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2026-01-19 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2026-01-19 | | | |
| | | MINOCAT | [] | elf.minocat | [] | 2026-01-19 | | | |
| | | StallionRAT | [] | win.stallion_rat | ['YoroTrooper'] | 2026-01-19 | | | |
| | | FoalShell | [] | win.foalshell | ['YoroTrooper'] | 2026-01-19 | | | |
| | | Smokest Stealer | [] | js.smokest | [] | 2026-01-19 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2026-01-19 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT10', 'APT32', 'Anunak', 'GALLIUM'] | 2026-01-19 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2026-01-19 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2026-01-19 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2026-01-19 | | | |
| | | MiniJunk | [] | win.minijunk | [] | 2026-01-19 | | | |
| | | MINIBIKE | [] | win.minibike | [] | 2026-01-19 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-01-19 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2026-01-19 | | | |
| | | NosyDownloader | [] | ps1.nosy_downloader | [] | 2026-01-19 | | | |
| | | JADESNOW | ['ChainedDown'] | js.jadesnow | [] | 2026-01-19 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2026-01-19 | | | |
| | | Subzero | ['Corelump', 'Jumplump'] | win.subzero | ['Denim Tsunami'] | 2026-01-16 | | | |
| | | Earthworm | [] | win.earthworm | [] | 2026-01-16 | | | |
| | | SharpHound | [] | win.sharphound | [] | 2026-01-16 | | | |
| | | SharpWMI | [] | win.sharpwmi | [] | 2026-01-16 | | | |
| | | Rubeus | [] | win.rubeus | [] | 2026-01-16 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | ['Storm-0249'] | 2026-01-16 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-01-15 | | | |
| | | ViperSoftX | [] | ps1.vipersoftx | [] | 2026-01-15 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-01-14 | | | |
| | | Supper | ['SocksShell', 'ZAPCAT'] | win.supper | ['Vanilla Tempest'] | 2026-01-14 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2026-01-14 | | | |
| | | PLUGGYAPE | [] | py.pluggyape | ['Void Blizzard'] | 2026-01-14 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2026-01-14 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2026-01-14 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2026-01-14 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2026-01-14 | | | |
| | | BianLian | [] | win.bianlian | [] | 2026-01-14 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2026-01-14 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2026-01-14 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2026-01-14 | | | |
| | | Sliver | [] | win.sliver | [] | 2026-01-14 | | | |
| | | Venom RAT | [] | win.venom | [] | 2026-01-14 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2026-01-14 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-01-14 | | | |
| | | NightshadeC2 | ['CastleRAT'] | win.nightshade_c2 | [] | 2026-01-12 | | | |
| | | Medusa | [] | win.medusa | [] | 2026-01-12 | | | |
| | | MedusaLocker | ['AKO Ransomware', 'AKO Doxware', 'MedusaReborn'] | win.medusalocker | [] | 2026-01-12 | | | |