| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-02-03 | | | |
| | | Chrysalis | [] | win.chrysalis | ['LOTUS PANDA'] | 2026-02-03 | | | |
| | | GRUNT | ['Covenant'] | win.grunt | [] | 2026-02-03 | | | |
| | | DynoWiper | [] | win.dynowiper | [] | 2026-02-03 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2026-02-03 | | | |
| | | PylangGhost | [] | py.pylangghost | ['WageMole'] | 2026-01-21 | | | |
| | | TelePowerBot | [] | win.telepowerbot | [] | 2026-02-03 | | | |
| | | Lynx | [] | win.lynx | [] | 2026-02-03 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2026-02-03 | | | |
| | | PromptLock | [] | win.prompt_lock | [] | 2026-02-03 | | | |
| | | MASS Logger | [] | win.masslogger | [] | 2026-02-03 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2026-02-03 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2026-02-03 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2026-02-03 | | | |
| | | Xillen Stealer | [] | win.xillen_stealer | [] | 2026-01-31 | | | |
| | | LazyWiper | [] | ps1.lazywiper | [] | 2026-01-30 | | | |
| | | IClickFix | [] | js.iclickfix | [] | 2026-01-30 | | | |
| | | Interlock | [] | win.interlock | [] | 2026-01-30 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-01-27 | | | |
| | | SloppyMIO | [] | win.sloppy_mio | [] | 2026-01-29 | | | |
| | | GhostChat | [] | apk.ghost_chat | [] | 2026-01-29 | | | |
| | | SHEETCREEP | [] | win.sheetcreep | [] | 2026-01-29 | | | |
| | | MAILCREEP | [] | win.mailcreep | [] | 2026-01-29 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2026-01-28 | | | |
| | | GRAYRABBIT | [] | win.grayrabbit | ['UNC3569'] | 2026-01-28 | | | |
| | | HelloBot | [] | win.hellobot | ['Earth Berberoka'] | 2026-01-28 | | | |
| | | HUI Loader | ['SIDESTEP'] | win.hui_loader | [] | 2026-01-28 | | | |
| | | KEYPLUG | ['ELFSHELF'] | elf.keyplug | ['APT41'] | 2026-01-28 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2026-01-28 | | | |
| | | SiestaGraph | ['DRAFTGRAPH'] | win.siesta_graph | [] | 2026-01-28 | | | |
| | | PeckBirdy | [] | js.peckbirdy | [] | 2026-01-28 | | | |
| | | JelusRAT | [] | win.jelus_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | GopherRAT | [] | win.gopher_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | PetitPotato | [] | win.petit_potato | ['Silent Chollima'] | 2026-01-27 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2026-01-27 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2026-01-27 | | | |
| | | Kimwolf | [] | apk.kimwolf | [] | 2026-01-27 | | | |
| | | Hakuna Matata | [] | win.hakuna_matata | [] | 2026-01-27 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2026-01-27 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT17', 'APT23', 'APT41', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA', 'Webworm'] | 2026-01-27 | | | |
| | | SNAPPYBEE | ['Deed RAT', 'POISONPLUG.DEED'] | win.snappybee | ['Earth Estries'] | 2026-01-27 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2026-01-27 | | | |
| | | VoidLink | [] | elf.voidlink | [] | 2026-01-27 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2026-01-27 | | | |
| | | Amnesia RAT | [] | py.amnesia_rat | [] | 2026-01-27 | | | |
| | | OtterCandy | ['HardHatRAT', 'UNSEENMINK'] | js.ottercandy | [] | 2026-01-27 | | | |
| | | ResidentBat | [] | apk.residentbat | [] | 2026-01-27 | | | |
| | | Amatera | [] | win.amatera | [] | 2026-01-27 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-01-27 | | | |
| | | HOMESTEEL | [] | vbs.homesteel | [] | 2026-01-26 | | | |
| | | WRECKSTEEL | [] | ps1.wrecksteel | [] | 2026-01-26 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2026-01-26 | | | |
| | | Vampire Bot | [] | win.vampire_bot | [] | 2026-01-26 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2026-01-26 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2026-01-26 | | | |
| | | SmartApeSG | ['HANEYMANEY', 'ZPHP'] | js.smartapesg | [] | 2026-01-21 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2026-01-21 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-01-21 | | | |
| | | Singularity | [] | elf.singularity | [] | 2026-01-21 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2026-01-21 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2026-01-21 | | | |
| | | GolangGhost | ['BitStep RAT', 'WeaselStore'] | win.golangghost | ['WageMole'] | 2026-01-21 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-01-20 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2026-01-19 | | | |
| | | Predator | ['PREYHUNTER'] | ios.predator | [] | 2026-01-19 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2026-01-19 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2026-01-19 | | | |
| | | MINOCAT | [] | elf.minocat | [] | 2026-01-19 | | | |
| | | StallionRAT | [] | win.stallion_rat | ['YoroTrooper'] | 2026-01-19 | | | |
| | | FoalShell | [] | win.foalshell | ['YoroTrooper'] | 2026-01-19 | | | |
| | | Smokest Stealer | [] | js.smokest | [] | 2026-01-19 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2026-01-19 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT10', 'APT32', 'Anunak', 'GALLIUM'] | 2026-01-19 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2026-01-19 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2026-01-19 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2026-01-19 | | | |
| | | MiniJunk | [] | win.minijunk | [] | 2026-01-19 | | | |
| | | MINIBIKE | [] | win.minibike | [] | 2026-01-19 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-01-19 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2026-01-19 | | | |
| | | NosyDownloader | [] | ps1.nosy_downloader | [] | 2026-01-19 | | | |
| | | JADESNOW | ['ChainedDown'] | js.jadesnow | [] | 2026-01-19 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2026-01-19 | | | |
| | | Subzero | ['Corelump', 'Jumplump'] | win.subzero | ['Denim Tsunami'] | 2026-01-16 | | | |
| | | Earthworm | [] | win.earthworm | [] | 2026-01-16 | | | |
| | | SharpHound | [] | win.sharphound | [] | 2026-01-16 | | | |
| | | SharpWMI | [] | win.sharpwmi | [] | 2026-01-16 | | | |
| | | Rubeus | [] | win.rubeus | [] | 2026-01-16 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | ['Storm-0249'] | 2026-01-16 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-01-15 | | | |
| | | ViperSoftX | [] | ps1.vipersoftx | [] | 2026-01-15 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-01-14 | | | |
| | | Supper | ['SocksShell', 'ZAPCAT'] | win.supper | ['Vanilla Tempest'] | 2026-01-14 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2026-01-14 | | | |
| | | PLUGGYAPE | [] | py.pluggyape | ['Void Blizzard'] | 2026-01-14 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2026-01-14 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2026-01-14 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2026-01-14 | | | |
| | | BianLian | [] | win.bianlian | [] | 2026-01-14 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2026-01-14 | | | |