| | | Proslikefan | [] | js.proslikefan | [] | 2026-06-03 | | | |
| | | Runster | ['Google Drive Caching'] | js.runster | [] | 2026-10-24 | | | |
| | | RotaJakiro | [] | elf.rotajakiro | ['APT32'] | 2021-05-08 | | | |
| | | RecJS | [] | js.recjs | [] | 2026-06-09 | | | |
| | | GGLdr | [] | vbs.ggldr | [] | 2020-05-27 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2025-03-10 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2026-07-28 | | | |
| | | Bofamet | [] | win.bofamet | [] | 2025-10-21 | | | |
| | | Potassium | [] | elf.potassium | [] | 2026-09-25 | | | |
| | | Drifter | ['Dongfeng'] | elf.drifter | [] | 2026-09-25 | | | |
| | | Phoenix Keylogger | [] | win.phoenix_keylogger | [] | 2022-09-19 | | | |
| | | Potemkin | [] | win.potemkin | [] | 2026-07-31 | | | |
| | | KGH_SPY | [] | win.kgh_spy | [] | 2021-07-20 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-07-01 | | | |
| | | FiveHands | ['Thieflock'] | win.fivehands | ['[Unnamed group]'] | 2023-12-28 | | | |
| | | Matiex | [] | win.matiex | [] | 2022-07-01 | | | |
| | | EYService | [] | win.eyservice | ['Nazar'] | 2020-05-07 | | | |
| | | Yunsip | [] | win.yunsip | [] | 2022-07-01 | | | |
| | | Vizom | [] | win.vizom | [] | 2020-10-23 | | | |
| | | Sisron | [] | win.sisron | [] | 2026-06-18 | | | |
| | | SPECTRALVIPER | [] | win.spectralviper | ['Rebel Jackal'] | 2023-07-26 | | | |
| | | GoldDigger | [] | apk.gold_digger | [] | 2026-10-28 | | | |
| | | Gigabud | [] | apk.gigabud | [] | 2026-10-28 | | | |
| | | BlackEnergy | [] | win.blackenergy | ['Sandworm'] | 2026-10-28 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2026-10-28 | | | |
| | | Waterbear | ['DbgPrint', 'EYEWELL'] | win.waterbear | ['BlackTech'] | 2026-10-28 | | | |
| | | Sliver | [] | win.sliver | [] | 2026-10-28 | | | |
| | | 3snake | [] | elf.3snake | [] | 2026-10-28 | | | |
| | | pupy | [] | elf.pupy | [] | 2026-10-28 | | | |
| | | Decoy Dog RAT | [] | elf.decoy_dog | [] | 2026-10-28 | | | |
| | | Atmosphere | [] | win.atmosphere | ['Silence group'] | 2026-10-28 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-10-28 | | | |
| | | NirCmd | [] | win.nircmd | [] | 2026-10-28 | | | |
| | | FinFisher RAT | ['FinSpy'] | win.finfisher | [] | 2026-10-28 | | | |
| | | Silence | ['TrueBot'] | win.silence | ['Silence group', 'TA505'] | 2026-10-28 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2026-10-28 | | | |
| | | Triton | ['Trisis', 'HatMan'] | win.triton | ['XENOTIME'] | 2026-10-28 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2026-10-28 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2026-10-28 | | | |
| | | PUBLOAD | ['ClaimLoader', 'PUBLOAD'] | win.pubload | [] | 2026-10-28 | | | |
| | | Voldemort | [] | win.voldemort | [] | 2026-10-28 | | | |
| | | TONESHELL | [] | win.toneshell | ['MUSTANG PANDA'] | 2026-10-28 | | | |
| | | Warsaw | [] | win.warsaw | [] | 2026-10-28 | | | |
| | | bancos | [] | win.bancos | [] | 2026-10-28 | | | |
| | | Ousaban | [] | win.ousaban | [] | 2026-10-28 | | | |
| | | reptile | [] | elf.reptile | [] | 2026-10-28 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2026-10-28 | | | |
| | | SLUB | [] | win.slub | [] | 2026-10-28 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2026-10-28 | | | |
| | | DARKDEW | [] | win.darkdew | [] | 2026-10-28 | | | |
| | | MISTCLOAK | ['HIUPAN'] | win.mistcloak | [] | 2026-10-28 | | | |
| | | BLUEHAZE | [] | win.bluehaze | [] | 2026-10-28 | | | |
| | | Pantegana | [] | win.pantegana | [] | 2026-10-28 | | | |
| | | INCONTROLLER | ['PIPEDREAM'] | win.incontroller | [] | 2026-10-28 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-10-28 | | | |
| | | Loki Password Stealer (PWS) | ['Burkina', 'Loki', 'LokiBot', 'LokiPWS'] | win.lokipws | ['SWEED', 'The Gorgon Group', 'Cobalt'] | 2026-10-28 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2026-10-28 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2026-10-28 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2026-10-28 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-10-28 | | | |
| | | CloudSyncD | [] | osx.cloudsyncd | ['REF8801'] | 2026-10-28 | | | |
| | | INC | [] | elf.inc | ['Storm-0494', 'Vanilla Tempest'] | 2026-10-28 | | | |
| | | INC | [] | win.inc | [] | 2026-10-28 | | | |
| | | Gentlemen | [] | win.gentlemen | ['The Gentlemen'] | 2026-10-28 | | | |
| | | PureLogs Stealer | ['zgRAT'] | win.purelogs | [] | 2026-10-28 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2026-10-28 | | | |
| | | UACMe | ['Akagi'] | win.uacme | [] | 2026-10-28 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2026-10-28 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2026-10-28 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT10', 'APT32', 'Anunak', 'GALLIUM'] | 2026-10-28 | | | |
| | | ICMacOS | [] | osx.icmacos | [] | 2026-10-28 | | | |
| | | Bandit Stealer | [] | win.bandit | [] | 2026-10-28 | | | |
| | | Cameleon | ['StormKitty'] | win.cameleon | [] | 2026-10-28 | | | |
| | | Alfonso Stealer | [] | win.alfonso_stealer | [] | 2026-10-28 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-10-28 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2026-10-28 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-10-28 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2026-10-28 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2026-10-28 | | | |
| | | Nanocore RAT | ['Nancrat', 'NanoCore'] | win.nanocore | ['APT33', 'The Gorgon Group'] | 2026-10-28 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2026-10-28 | | | |
| | | Fabookie | [] | win.fabookie | [] | 2026-10-28 | | | |
| | | Panda Stealer | [] | win.panda_stealer | [] | 2026-10-28 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2026-10-28 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2026-10-28 | | | |
| | | XCSSET | [] | osx.xcsset | [] | 2026-10-26 | | | |
| | | OSAMiner | [] | osx.osaminer | [] | 2026-10-26 | | | |
| | | Stadia | [] | win.stadia | [] | 2026-10-24 | | | |
| | | Amadey | [] | win.amadey | [] | 2026-10-24 | | | |
| | | ArcaneStealer | [] | win.arcane_stealer | [] | 2026-10-24 | | | |
| | | KarstoRAT | [] | win.karsto_rat | [] | 2026-10-24 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-10-24 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2026-10-24 | | | |
| | | GCleaner | [] | win.gcleaner | [] | 2026-10-24 | | | |
| | | Atlas RAT | [] | win.atlas_rat | ['TA4922'] | 2026-10-24 | | | |
| | | PixyNetLoader | [] | win.pixynet_loader | ['APT28'] | 2026-10-24 | | | |
| | | Zalmoxis | [] | win.zalmoxis | [] | 2026-10-24 | | | |
| | | SloppyRAT | ['ZINCHILL', 'PSHaunt'] | win.sloppyrat | [] | 2026-10-24 | | | |
| | | DarkVision RAT | [] | win.darkvision_rat | [] | 2026-10-24 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |