| | | SalatStealer | [] | win.salatstealer | [] | 2025-08-28 | | | |
| | | Sindoor | [] | elf.sindoor | ['Operation C-Major'] | 2025-09-01 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2025-09-01 | | | |
| | | Supper | ['SocksShell', 'ZAPCAT'] | win.supper | ['Vanilla Tempest'] | 2025-07-01 | | | |
| | | PylangGhost | [] | py.pylangghost | ['WageMole'] | 2025-08-18 | | | |
| | | Amadey | [] | win.amadey | [] | 2025-08-29 | | | |
| | | Hook | [] | apk.hook | [] | 2025-08-29 | | | |
| | | s1ngularity Stealer | [] | js.s1ngularity | [] | 2025-08-29 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-08-29 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2025-08-29 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-08-29 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-08-29 | | | |
| | | LimeRAT | [] | win.limerat | ['APT-C-36'] | 2025-08-29 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-08-29 | | | |
| | | PureCrypter | [] | win.purecrypter | [] | 2025-08-29 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-08-29 | | | |
| | | GolangGhost | ['BitStep RAT', 'WeaselStore'] | win.golangghost | ['WageMole'] | 2025-08-29 | | | |
| | | GolangGhost | [] | osx.golangghost | ['WageMole'] | 2025-08-29 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-08-29 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-08-29 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-08-29 | | | |
| | | Godfather | [] | apk.godfather | [] | 2025-08-29 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2025-08-28 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2025-08-28 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | ['Vanilla Tempest'] | 2025-08-28 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | ['Alpha Spider', 'RansomHub', 'Vanilla Tempest'] | 2025-08-28 | | | |
| | | MetaStealer | [] | win.metastealer | ['UNC5537'] | 2025-09-01 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2025-08-28 | | | |
| | | Akira Stealer | [] | py.akira_stealer | [] | 2025-08-28 | | | |
| | | PromptLock | [] | win.prompt_lock | [] | 2025-08-27 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2025-08-15 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2025-08-27 | | | |
| | | p0sT5n1F3r | [] | elf.p0st5n1f3r | [] | 2025-08-27 | | | |
| | | LunaSpy | ['Backdoor.916'] | apk.luna_spy | [] | 2025-08-26 | | | |
| | | STATICPLUGIN | [] | win.staticplugin | ['MUSTANG PANDA'] | 2025-08-26 | | | |
| | | TamperedChef | [] | win.tampered_chef | [] | 2025-08-26 | | | |
| | | Vshell | [] | win.vshell | [] | 2025-08-25 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2025-08-25 | | | |
| | | TgToxic | [] | apk.tgtoxic | [] | 2025-08-25 | | | |
| | | SilentPrism | [] | ps1.silent_prism | ['Larva-208'] | 2025-08-25 | | | |
| | | Fickle Stealer | [] | win.fickle | [] | 2025-08-25 | | | |
| | | XenArmor | ['XenArmor Suite'] | win.xenarmor | [] | 2023-05-10 | | | |
| | | BQTlock | [] | win.bqtlock | [] | 2025-08-25 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2025-08-25 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-07-14 | | | |
| | | RapperBot | [] | elf.rapper_bot | [] | 2025-08-22 | | | |
| | | Luna Grabber | [] | py.lunagrabber | [] | 2025-08-22 | | | |
| | | ApolloShadow | [] | win.apollo_shadow | ['Turla'] | 2025-08-22 | | | |
| | | QuirkyLoader | [] | win.quirkyloader | [] | 2025-08-22 | | | |
| | | Dridex | [] | win.dridex | ['Evil Corp', 'INDRIK SPIDER', 'TA505'] | 2024-04-15 | | | |
| | | SoundBill | [] | win.soundbill | [] | 2025-08-21 | | | |
| | | PicassoLoader | [] | win.picasso_loader | ['Ghostwriter'] | 2025-08-26 | | | |
| | | XenoRAT | [] | win.xenorat | [] | 2025-08-20 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2025-08-20 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2025-08-20 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-08-20 | | | |
| | | WarLock | [] | win.warlock | [] | 2025-08-20 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2025-08-20 | | | |
| | | HawkEye Keylogger | ['HawkEye', 'HawkEye Reborn', 'Predator Pain'] | win.hawkeye_keylogger | [] | 2025-08-20 | | | |
| | | VELETRIX | [] | win.veletrix | [] | 2025-08-19 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2025-08-19 | | | |
| | | Qilin | [] | elf.qilin | [] | 2025-08-19 | | | |
| | | Morpheus Loader | [] | win.morpheus | [] | 2025-08-19 | | | |
| | | Aurotun Stealer | [] | win.aurotun_stealer | [] | 2025-08-18 | | | |
| | | Vidar | [] | win.vidar | [] | 2025-08-18 | | | |
| | | PS1Bot | [] | php.ps1bot | [] | 2025-08-18 | | | |
| | | Nitrogen Ransomware | [] | win.nitrogen_ransomware | [] | 2025-08-18 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2025-08-18 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2025-08-18 | | | |
| | | PolarEdge | [] | elf.polaredge | [] | 2025-08-18 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-08-18 | | | |
| | | Plague | [] | elf.plague | [] | 2025-08-18 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2025-08-18 | | | |
| | | Cmimai Stealer | [] | win.cmimai | [] | 2025-08-18 | | | |
| | | magecart | [] | js.magecart | ['FIN6', 'MageCart'] | 2025-08-18 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-08-18 | | | |
| | | SmartLoader | [] | win.smartloader | [] | 2025-08-18 | | | |
| | | BeaverTail | [] | osx.beavertail | [] | 2025-08-18 | | | |
| | | Beavertail | [] | win.beavertail | ['WageMole'] | 2025-08-18 | | | |
| | | XTinyLoader | [] | win.xtinyloader | [] | 2025-08-15 | | | |
| | | Raspberry Robin | ['RaspberryRobin', 'QNAP-Worm', 'LINK_MSIEXEC'] | win.raspberry_robin | [] | 2025-08-15 | | | |
| | | Parrot TDS WebShell | [] | php.parrot_tds_shell | [] | 2025-08-15 | | | |
| | | Parrot TDS | [] | js.parrot_tds | [] | 2025-08-15 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2025-08-15 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-08-15 | | | |
| | | Nova Stealer | ['Malicord'] | win.nova | [] | 2025-08-15 | | | |
| | | SafePay | [] | win.safepay | [] | 2025-08-15 | | | |
| | | BlankGrabber | [] | py.blankgrabber | [] | 2025-08-15 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2025-08-15 | | | |
| | | StrelaStealer | [] | win.strelastealer | [] | 2025-08-15 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2025-08-15 | | | |
| | | Global | ['GLOBAL GROUP'] | win.global | [] | 2025-08-15 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | ['Vanilla Tempest'] | 2025-07-30 | | | |
| | | AllaKore | [] | win.allakore | [] | 2025-07-30 | | | |
| | | RN Stealer | [] | py.rn_stealer | ['TraderTraitor'] | 2025-07-29 | | | |
| | | Manuscrypt | [] | osx.manuscrypt | ['Lazarus Group'] | 2025-07-29 | | | |
| | | DRATzarus | ['ThreatNeedle'] | win.dratzarus | ['Lazarus Group'] | 2025-07-29 | | | |
| | | PostNapTea | ['SIGNBT'] | win.postnaptea | ['Lazarus Group'] | 2025-07-29 | | | |
| | | wAgentTea | ['wAgent'] | win.wagenttea | ['Lazarus Group'] | 2025-07-29 | | | |