| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-06-27 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-06-04 | | | |
| | | HATVIBE | [] | vbs.hatvibe | ['UAC-0063'] | 2025-07-11 | | | |
| | | DownEx | [] | win.downex | ['UAC-0063'] | 2025-07-11 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-06-02 | | | |
| | | PylangGhost | [] | py.pylangghost | ['WageMole'] | 2025-06-25 | | | |
| | | PXA Stealer | ['PXAStealer', 'PXA'] | py.pxa_stealer | [] | 2025-07-09 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2025-07-08 | | | |
| | | Amatera | [] | win.amatera | [] | 2025-07-08 | | | |
| | | iox | [] | win.iox | [] | 2025-07-08 | | | |
| | | HTran | ['HUC Packet Transmit Tool', 'lcx'] | win.htran | ['GALLIUM', 'UPS'] | 2025-07-08 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2025-07-08 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT32', 'Anunak', 'GALLIUM'] | 2025-07-07 | | | |
| | | POORTRY | [] | win.poortry | [] | 2025-07-07 | | | |
| | | PowerNet | [] | ps1.powernet | ['FIN7'] | 2025-07-07 | | | |
| | | RevC2 | [] | win.revc2 | [] | 2025-07-07 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2025-07-07 | | | |
| | | Phemedrone Stealer | ['Ov3r_Stealer'] | win.phemedrone_stealer | [] | 2025-07-07 | | | |
| | | JanelaRAT | [] | win.janela_rat | [] | 2025-07-07 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2025-07-07 | | | |
| | | GOREVERSE | [] | elf.goreverse | ['UNC5174'] | 2025-07-07 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2025-07-07 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2025-06-30 | | | |
| | | Supper | ['SocksShell', 'ZAPCAT'] | win.supper | ['Vanilla Tempest'] | 2025-07-01 | | | |
| | | SideWalk | [] | elf.sidewalk | [] | 2025-07-02 | | | |
| | | JenX | [] | elf.jenx | [] | 2025-07-02 | | | |
| | | GOREshell | [] | elf.goreshell | [] | 2025-07-02 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-07-01 | | | |
| | | GolangGhost | [] | osx.golangghost | ['WageMole'] | 2025-06-25 | | | |
| | | FrostyFerret | [] | osx.frostyferret | ['WageMole'] | 2025-04-27 | | | |
| | | EvilConwi | [] | win.evilconwi | [] | 2025-06-30 | | | |
| | | Qilin | [] | elf.qilin | [] | 2025-06-30 | | | |
| | | Skuld | ['TMPN'] | win.skuld | [] | 2025-06-30 | | | |
| | | HexaLocker | [] | win.hexalocker | [] | 2025-06-30 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2025-06-30 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2025-06-27 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-06-27 | | | |
| | | Skynet | [] | win.skynet | [] | 2025-06-26 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2025-06-26 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2025-06-25 | | | |
| | | Vidar | [] | win.vidar | [] | 2025-06-25 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2025-06-25 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-06-25 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2025-06-25 | | | |
| | | BEARDSHELL | [] | win.beardshell | ['APT28'] | 2025-06-25 | | | |
| | | SLIMAGENT | [] | win.slimagent | ['APT28'] | 2025-06-25 | | | |
| | | MASS Logger | [] | win.masslogger | [] | 2025-06-25 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-06-25 | | | |
| | | GolangGhost | ['BitStep RAT', 'WeaselStore'] | win.golangghost | ['WageMole'] | 2025-06-25 | | | |
| | | Xloader | ['Formbook'] | osx.xloader | [] | 2025-06-25 | | | |
| | | Brute Ratel C4 | ['BOLDBADGER', 'BruteRatel'] | win.brute_ratel_c4 | [] | 2025-06-24 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-06-24 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2025-06-24 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2025-06-24 | | | |
| | | Meduza Stealer | [] | win.meduza | [] | 2025-06-24 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-06-24 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-06-24 | | | |
| | | Fog | [] | win.fog | [] | 2025-06-24 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2025-06-24 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-06-24 | | | |
| | | ShortLeash | [] | win.shortleash | [] | 2025-06-24 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2025-06-24 | | | |
| | | ShortLeash | [] | elf.shortleash | [] | 2025-06-24 | | | |
| | | Flodrix | [] | elf.flodrix | [] | 2025-06-23 | | | |
| | | Sorillus RAT | [] | jar.sorillus | [] | 2025-06-23 | | | |
| | | XDSpy | [] | win.xdspy | [] | 2025-06-23 | | | |
| | | HOLERUN | ['LAGTOY'] | win.holerun | [] | 2025-06-20 | | | |
| | | DollyWay | [] | php.dollyway | [] | 2025-06-20 | | | |
| | | KimJongRat | [] | win.kimjongrat | [] | 2025-06-20 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2025-06-20 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-06-20 | | | |
| | | HyperSSL | ['FOCUSFJORD', 'Soldier', 'Sysupdate'] | win.hyperssl | ['EMISSARY PANDA'] | 2025-06-20 | | | |
| | | HyperSSL | ['SysUpdate'] | elf.hyperssl | ['APT27'] | 2025-06-20 | | | |
| | | Pteranodon | ['Pterodo'] | win.pteranodon | ['Gamaredon Group', 'Operation Armageddon'] | 2025-06-20 | | | |
| | | QuietSieve | [] | win.quietsieve | ['Gamaredon Group'] | 2025-06-20 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-06-20 | | | |
| | | HUI Loader | ['SIDESTEP'] | win.hui_loader | [] | 2025-06-20 | | | |
| | | Nokki | [] | win.nokki | ['APT37'] | 2025-06-20 | | | |
| | | MyDoom | ['Novarg', 'Mimail'] | win.mydoom | [] | 2025-06-20 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2025-06-20 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2025-06-20 | | | |
| | | Hydra | [] | apk.hydra | [] | 2025-06-20 | | | |
| | | IPStorm | ['InterPlanetary Storm'] | apk.ipstorm | [] | 2025-06-20 | | | |
| | | AndroRAT | [] | apk.androrat | [] | 2025-06-20 | | | |
| | | FakeGram | ['FakeTGram'] | apk.faketgram | [] | 2025-06-20 | | | |
| | | Anubis | ['BankBot', 'android.bankbot', 'android.bankspy'] | apk.anubis | [] | 2025-06-20 | | | |
| | | Dendroid | [] | apk.dendroid | [] | 2025-06-20 | | | |
| | | CraxsRAT | [] | apk.craxs_rat | [] | 2025-06-20 | | | |
| | | Antidot | [] | apk.antidot | [] | 2025-06-20 | | | |
| | | ZeroAccess | ['Max++', 'Sirefef', 'Smiscer', 'ZAccess'] | win.zeroaccess | [] | 2025-06-20 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2025-06-18 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2025-06-18 | | | |
| | | TrickBot | ['Trickster', 'TheTrick', 'TrickLoader'] | win.trickbot | ['TA505', 'UNC1878', 'WIZARD SPIDER'] | 2025-06-18 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2025-06-18 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-06-18 | | | |
| | | Chaos | ['FakeRyuk', 'RyukJoke', 'Yashma'] | win.chaos | [] | 2025-06-18 | | | |
| | | Nitrogen Loader | [] | win.nitrogen | [] | 2025-05-21 | | | |
| | | Flesh Stealer | [] | win.flesh_stealer | [] | 2025-06-18 | | | |
| | | SalatStealer | [] | win.salatstealer | [] | 2025-06-17 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2025-06-17 | | | |