| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-01-27 | | | |
| | | Astaroth | ['Guildma'] | win.astaroth | [] | 2026-02-17 | | | |
| | | CASTLELOADER | [] | win.castleloader | [] | 2026-02-17 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2026-02-17 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2026-02-17 | | | |
| | | Kimwolf | [] | apk.kimwolf | [] | 2026-02-17 | | | |
| | | DynoWiper | [] | win.dynowiper | [] | 2026-02-17 | | | |
| | | PylangGhost | [] | py.pylangghost | ['WageMole'] | 2026-01-21 | | | |
| | | NonEuclid RAT | ['LiberiumRAT', 'ShadowRoot', 'SheetRAT'] | win.noneuclid_rat | [] | 2026-02-17 | | | |
| | | Razr ransomware | [] | win.razr | [] | 2026-02-15 | | | |
| | | JADESNOW | ['ChainedDown'] | js.jadesnow | [] | 2026-01-19 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2026-01-21 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2026-01-21 | | | |
| | | NodeCordRAT | [] | js.nodecordrat | [] | 2026-02-17 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-01-27 | | | |
| | | OctoRAT | [] | win.octorat | [] | 2026-02-05 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2026-02-05 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2026-02-05 | | | |
| | | Chrysalis | [] | win.chrysalis | ['LOTUS PANDA'] | 2026-02-03 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-02-03 | | | |
| | | GRUNT | ['Covenant'] | win.grunt | [] | 2026-02-03 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2026-02-03 | | | |
| | | TelePowerBot | [] | win.telepowerbot | [] | 2026-02-03 | | | |
| | | Lynx | [] | win.lynx | [] | 2026-02-03 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2026-02-03 | | | |
| | | PromptLock | [] | win.prompt_lock | [] | 2026-02-03 | | | |
| | | MASS Logger | [] | win.masslogger | [] | 2026-02-03 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2026-02-03 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2026-02-03 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2026-02-03 | | | |
| | | Xillen Stealer | [] | win.xillen_stealer | [] | 2026-01-31 | | | |
| | | LazyWiper | [] | ps1.lazywiper | [] | 2026-01-30 | | | |
| | | IClickFix | [] | js.iclickfix | [] | 2026-01-30 | | | |
| | | Interlock | [] | win.interlock | [] | 2026-01-30 | | | |
| | | SloppyMIO | [] | win.sloppy_mio | [] | 2026-01-29 | | | |
| | | GhostChat | [] | apk.ghost_chat | [] | 2026-01-29 | | | |
| | | SHEETCREEP | [] | win.sheetcreep | [] | 2026-01-29 | | | |
| | | MAILCREEP | [] | win.mailcreep | [] | 2026-01-29 | | | |
| | | GRAYRABBIT | [] | win.grayrabbit | ['UNC3569'] | 2026-01-28 | | | |
| | | HelloBot | [] | win.hellobot | ['Earth Berberoka'] | 2026-01-28 | | | |
| | | HUI Loader | ['SIDESTEP'] | win.hui_loader | [] | 2026-01-28 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2026-01-28 | | | |
| | | SiestaGraph | ['DRAFTGRAPH'] | win.siesta_graph | [] | 2026-01-28 | | | |
| | | KEYPLUG | ['ELFSHELF'] | elf.keyplug | ['APT41'] | 2026-01-28 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2026-01-28 | | | |
| | | PeckBirdy | [] | js.peckbirdy | [] | 2026-01-28 | | | |
| | | JelusRAT | [] | win.jelus_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | GopherRAT | [] | win.gopher_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | PetitPotato | [] | win.petit_potato | ['Silent Chollima'] | 2026-01-27 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2026-01-27 | | | |
| | | Hakuna Matata | [] | win.hakuna_matata | [] | 2026-01-27 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2026-01-27 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT17', 'APT23', 'APT41', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA', 'Webworm'] | 2026-01-27 | | | |
| | | SNAPPYBEE | ['Deed RAT', 'POISONPLUG.DEED'] | win.snappybee | ['Earth Estries'] | 2026-01-27 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2026-01-27 | | | |
| | | VoidLink | [] | elf.voidlink | [] | 2026-01-27 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2026-01-27 | | | |
| | | Amnesia RAT | [] | py.amnesia_rat | [] | 2026-01-27 | | | |
| | | OtterCandy | ['HardHatRAT', 'UNSEENMINK'] | js.ottercandy | [] | 2026-01-27 | | | |
| | | ResidentBat | [] | apk.residentbat | [] | 2026-01-27 | | | |
| | | Amatera | [] | win.amatera | [] | 2026-01-27 | | | |
| | | WRECKSTEEL | [] | ps1.wrecksteel | [] | 2026-01-26 | | | |
| | | HOMESTEEL | [] | vbs.homesteel | [] | 2026-01-26 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2026-01-26 | | | |
| | | Vampire Bot | [] | win.vampire_bot | [] | 2026-01-26 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2026-01-26 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2026-01-26 | | | |
| | | SmartApeSG | ['HANEYMANEY', 'ZPHP'] | js.smartapesg | [] | 2026-01-21 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2026-01-21 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-01-21 | | | |
| | | Singularity | [] | elf.singularity | [] | 2026-01-21 | | | |
| | | GolangGhost | ['BitStep RAT', 'WeaselStore'] | win.golangghost | ['WageMole'] | 2026-01-21 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-01-20 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2026-01-19 | | | |
| | | Predator | ['PREYHUNTER'] | ios.predator | [] | 2026-01-19 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2026-01-19 | | | |
| | | MINOCAT | [] | elf.minocat | [] | 2026-01-19 | | | |
| | | StallionRAT | [] | win.stallion_rat | ['YoroTrooper'] | 2026-01-19 | | | |
| | | FoalShell | [] | win.foalshell | ['YoroTrooper'] | 2026-01-19 | | | |
| | | Smokest Stealer | [] | js.smokest | [] | 2026-01-19 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2026-01-19 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT10', 'APT32', 'Anunak', 'GALLIUM'] | 2026-01-19 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2026-01-19 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2026-01-19 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2026-01-19 | | | |
| | | MiniJunk | [] | win.minijunk | [] | 2026-01-19 | | | |
| | | MINIBIKE | [] | win.minibike | [] | 2026-01-19 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-01-19 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2026-01-19 | | | |
| | | NosyDownloader | [] | ps1.nosy_downloader | [] | 2026-01-19 | | | |
| | | Subzero | ['Corelump', 'Jumplump'] | win.subzero | ['Denim Tsunami'] | 2026-01-16 | | | |
| | | Earthworm | [] | win.earthworm | [] | 2026-01-16 | | | |
| | | SharpHound | [] | win.sharphound | [] | 2026-01-16 | | | |
| | | SharpWMI | [] | win.sharpwmi | [] | 2026-01-16 | | | |
| | | Rubeus | [] | win.rubeus | [] | 2026-01-16 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | ['Storm-0249'] | 2026-01-16 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-01-15 | | | |
| | | ViperSoftX | [] | ps1.vipersoftx | [] | 2026-01-15 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-01-14 | | | |