| | | LONGLEASH | [] | elf.longleash | [] | 2026-07-13 | | | |
| | | JARLEASH | [] | jar.jarleash | [] | 2026-07-13 | | | |
| | | DOGLEASH | [] | elf.dogleash | [] | 2026-07-13 | | | |
| | | Ousaban | [] | win.ousaban | [] | 2026-07-13 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-07-01 | | | |
| | | Shai-Hulud | [] | js.shai_hulud | [] | 2026-07-07 | | | |
| | | MINIRECON | [] | win.minirecon | ['MUSTANG PANDA'] | 2026-07-02 | | | |
| | | JADESNOW | ['ChainedDown'] | js.jadesnow | ['WageMole'] | 2026-07-02 | | | |
| | | ZOHOMURK | [] | win.zohomurk | ['MUSTANG PANDA'] | 2026-07-01 | | | |
| | | XehookStealer | [] | win.xehook | [] | 2026-07-01 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2026-07-01 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2026-07-01 | | | |
| | | Reshell | [] | win.reshell | ['GALLIUM'] | 2026-07-01 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2026-07-01 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-07-01 | | | |
| | | 8Base | [] | win.8base | [] | 2026-07-01 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2026-07-01 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2026-07-01 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2026-07-01 | | | |
| | | Sliver | [] | win.sliver | [] | 2026-07-01 | | | |
| | | GOREVERSE | [] | elf.goreverse | ['UNC5174'] | 2026-07-01 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-07-01 | | | |
| | | Amadey | [] | win.amadey | [] | 2026-07-01 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-07-01 | | | |
| | | PITSOCK | [] | elf.pitsock | [] | 2026-06-30 | | | |
| | | PITHOOK | [] | elf.pithook | [] | 2026-06-30 | | | |
| | | PITFUEL | [] | elf.pitfuel | [] | 2026-06-30 | | | |
| | | BUSHWALK | [] | elf.bushwalk | [] | 2026-06-30 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-06-30 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | ['Vanilla Tempest'] | 2026-06-30 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2026-06-30 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2026-06-30 | | | |
| | | Babadeda | [] | win.babadeda | [] | 2026-06-30 | | | |
| | | SystemBC | [] | elf.systembc | [] | 2026-06-30 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2026-06-30 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2026-06-30 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2026-06-30 | | | |
| | | Akira | ['REDBIKE'] | elf.akira | ['Storm-1567'] | 2026-06-30 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-06-29 | | | |
| | | Socks5Systemz | ['ProxyBox'] | win.socks5_systemz | [] | 2026-06-29 | | | |
| | | Showboat | [] | elf.showboat | [] | 2026-06-29 | | | |
| | | Unidentified 125 (RAT, Dropping Elephant) | [] | win.unidentified_125 | ['QUILTED TIGER'] | 2026-06-25 | | | |
| | | SprySOCKS | [] | win.sprysocks | ['Earth Lusca'] | 2026-06-25 | | | |
| | | MLTBackdoor | [] | win.mltbackdoor | [] | 2026-06-25 | | | |
| | | Gaslight | [] | osx.gaslight | [] | 2026-06-25 | | | |
| | | Keenadu | [] | apk.keenadu | [] | 2026-06-25 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2026-06-25 | | | |
| | | Lorem Ipsum | [] | win.lorem_ipsum | [] | 2026-06-25 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2026-06-24 | | | |
| | | PylangGhost | ['ICEBITE.PYTHON', 'WeaselStore'] | py.pylangghost | ['WageMole'] | 2026-06-24 | | | |
| | | CASTLESTEALER | [] | win.castle_stealer | [] | 2026-06-24 | | | |
| | | SolarisLoader | [] | win.solaris_loader | [] | 2026-06-24 | | | |
| | | oxloader | [] | win.oxloader | [] | 2026-06-23 | | | |
| | | MASOL | [] | win.masol | [] | 2026-06-23 | | | |
| | | GraphicalNeutrino | ['SNOWYAMBER'] | win.graphical_neutrino | ['APT29'] | 2023-07-28 | | | |
| | | elf.iocontrol | ['OrpraCab', 'QueueCat'] | elf.iocontrol | ['Cyber Av3ngers'] | 2025-06-11 | | | |
| | | SMOKEDHAM | [] | win.smokedham | [] | 2026-06-19 | | | |
| | | Hunters International | [] | win.hunters_international | ['Storm-0501'] | 2026-06-19 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2026-06-19 | | | |
| | | SoxAgent | [] | elf.soxagent | ['SLIME88'] | 2026-06-18 | | | |
| | | GammDrop | [] | vbs.gammadrop | ['Gamaredon Group'] | 2026-06-18 | | | |
| | | GammaLoad | [] | vbs.gammaload | ['Gamaredon Group'] | 2026-06-18 | | | |
| | | Atlas RAT | [] | win.atlas_rat | ['TA4922'] | 2026-06-18 | | | |
| | | BlackSuit | [] | win.blacksuit | [] | 2026-06-18 | | | |
| | | SilentRunLoader | [] | win.silent_run_loader | ['TA4922'] | 2026-06-18 | | | |
| | | RomulusLoader | [] | win.romulus_loader | ['TA4922'] | 2026-06-18 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-06-18 | | | |
| | | Amatera | [] | win.amatera | [] | 2026-06-18 | | | |
| | | Sisron | [] | win.sisron | [] | 2026-06-18 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2026-06-18 | | | |
| | | ImprudentCook | [] | win.imprudentcook | ['Lazarus Group'] | 2026-06-18 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2026-06-18 | | | |
| | | ScoringMathTea | [] | win.scoring_math_tea | ['Lazarus Group'] | 2026-06-18 | | | |
| | | BACKORDER | [] | win.backorder | ['Sandworm'] | 2026-06-18 | | | |
| | | BloodAlchemy | [] | win.bloodalchemy | [] | 2026-06-18 | | | |
| | | BirdCall | [] | win.birdcall | ['APT37'] | 2026-06-18 | | | |
| | | BLINDINGCAN | ['AIRDRY', 'ZetaNile'] | win.blindingcan | ['Lazarus Group'] | 2026-06-18 | | | |
| | | WAVESHAPER | ['osx.curlyveiltea'] | osx.waveshaper | ['UNC1069'] | 2026-06-18 | | | |
| | | Rook | [] | win.rook | [] | 2026-06-18 | | | |
| | | Tiger RAT | [] | win.tiger_rat | ['Silent Chollima'] | 2026-06-18 | | | |
| | | SnappyClient | ['SilabRAT'] | win.snappy_client | [] | 2026-06-18 | | | |
| | | EDR-Freeze | [] | win.edr_freeze | [] | 2026-06-10 | | | |
| | | defendnot | [] | win.defendnot | [] | 2026-06-10 | | | |
| | | StilachiRAT | [] | win.stilachi_rat | [] | 2026-06-10 | | | |
| | | LegionRelay | [] | ps1.legion_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | PhantomRelay | [] | ps1.phantom_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | Banana RAT | [] | ps1.banana_rat | ['SHADOW-WATER-063'] | 2026-06-09 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2026-06-09 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2026-06-09 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2026-06-09 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-06-09 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2026-06-09 | | | |
| | | PixyNetLoader | [] | win.pixynet_loader | ['APT28'] | 2026-06-10 | | | |
| | | LOTUSLITE | [] | win.lotuslite | ['MUSTANG PANDA'] | 2026-06-09 | | | |
| | | DPAPILoader | [] | win.dpapi_loader | ['Lazarus Group'] | 2026-06-09 | | | |
| | | RemotePE | [] | win.remotepe | ['Lazarus Group'] | 2026-06-09 | | | |
| | | SILENTLOOP | [] | ps1.silentloop | [] | 2026-06-09 | | | |
| | | AGINGFLY | [] | win.agingfly | [] | 2026-06-09 | | | |
| | | Overlord RAT | [] | win.overlord | [] | 2026-06-09 | | | |
| | | xmrig | [] | win.xmrig | [] | 2026-06-09 | | | |