| | | Lorem Ipsum | ['AxolotlLoader', 'OAKGLINT'] | win.lorem_ipsum | [] | 2026-09-07 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-09-16 | | | |
| | | Metamorfo | ['Casbaneiro'] | win.metamorfo | [] | 2026-09-16 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2026-09-14 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT10', 'APT32', 'Anunak', 'GALLIUM'] | 2026-09-14 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2026-09-14 | | | |
| | | Behinder | [] | php.behinder | [] | 2026-09-14 | | | |
| | | SNOWLIGHT | [] | elf.snowlight | ['UNC5174'] | 2026-09-14 | | | |
| | | EtherRAT | [] | js.ether_rat | [] | 2026-09-14 | | | |
| | | XMRIG | [] | elf.xmrig | [] | 2026-09-14 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2026-09-14 | | | |
| | | MINOCAT | [] | elf.minocat | [] | 2026-09-14 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2026-09-14 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2026-09-14 | | | |
| | | COMPOOD | [] | elf.compood | [] | 2026-09-14 | | | |
| | | Mirai | [] | win.mirai | [] | 2026-09-14 | | | |
| | | VShell | [] | win.vshell | [] | 2026-09-14 | | | |
| | | xmrig | [] | win.xmrig | [] | 2026-09-14 | | | |
| | | Monero Miner | ['CoinMiner'] | win.monero_miner | [] | 2026-09-14 | | | |
| | | HackBrowserData | [] | win.hackbrowserdata | [] | 2026-09-14 | | | |
| | | GoToHTTP | [] | win.gotohttp | [] | 2026-09-14 | | | |
| | | Coinminer | [] | win.coinminer | [] | 2026-09-14 | | | |
| | | BabyLon RAT | [] | win.babylon_rat | [] | 2026-09-14 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2026-09-14 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2026-09-14 | | | |
| | | Koktevrat | [] | apk.koktevrat | [] | 2026-09-14 | | | |
| | | LxBase RAT | [] | win.lxbaserat | [] | 2026-09-14 | | | |
| | | win.beast | ['blacklockbit'] | win.beast | [] | 2026-09-07 | | | |
| | | CASTLESTEALER | [] | win.castle_stealer | [] | 2026-09-07 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-09-07 | | | |
| | | StoatWaffle | [] | js.stoatwaffle | [] | 2026-09-07 | | | |
| | | ZimReaper | [] | js.zimreaper | ['Void Blizzard'] | 2026-09-07 | | | |
| | | Nasty | [] | elf.nasty | [] | 2026-09-07 | | | |
| | | Akira | ['REDBIKE'] | elf.akira | ['Storm-1567'] | 2026-09-07 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2026-09-07 | | | |
| | | Rhysida | [] | elf.rhysida | ['Vanilla Tempest'] | 2026-09-07 | | | |
| | | BlackByte | [] | win.blackbyte | [] | 2026-09-07 | | | |
| | | BlueSky | [] | win.bluesky | [] | 2026-09-07 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2026-09-07 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2026-09-07 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-09-07 | | | |
| | | Rhysida | [] | win.rhysida | ['Vanilla Tempest'] | 2026-09-07 | | | |
| | | Spyder | [] | win.spyder | [] | 2026-09-07 | | | |
| | | Qilin | [] | elf.qilin | [] | 2026-09-07 | | | |
| | | INC | [] | elf.inc | ['Storm-0494', 'Vanilla Tempest'] | 2026-09-07 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2026-09-07 | | | |
| | | INC | [] | win.inc | [] | 2026-09-07 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-09-07 | | | |
| | | XCSSET | [] | osx.xcsset | [] | 2026-09-07 | | | |
| | | Shlayer | [] | osx.shlayer | [] | 2026-09-07 | | | |
| | | FlashBack | ['FakeFlash'] | osx.flashback | [] | 2026-09-07 | | | |
| | | EvilQuest | ['ThiefQuest'] | osx.evilquest | [] | 2026-09-07 | | | |
| | | RevStealer | [] | win.revstealer | [] | 2026-09-07 | | | |
| | | POORTRY | [] | win.poortry | [] | 2026-09-07 | | | |
| | | NightLedger | [] | win.nightledger | [] | 2026-09-07 | | | |
| | | Malterminal | [] | win.malterminal | [] | 2026-09-07 | | | |
| | | Remus | [] | win.remus | [] | 2026-09-07 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2026-09-07 | | | |
| | | Unidentified 126 (GoogleSheets C2) | [] | win.unidentified_126 | [] | 2026-09-07 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2026-09-07 | | | |
| | | SnappyClient | ['SilabRAT'] | win.snappy_client | [] | 2026-09-07 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2026-09-07 | | | |
| | | Kimwolf | [] | apk.kimwolf | [] | 2026-09-07 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2026-09-07 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | ACR Stealer | [] | win.acr_stealer | [] | 2026-09-07 | | | |
| | | Amatera | [] | win.amatera | [] | 2026-09-07 | | | |
| | | Aura Stealer | ['AURA Stealer', 'AURASTEAL'] | win.aurastealer | [] | 2026-05-19 | | | |
| | | SmartApeSG | ['HANEYMANEY', 'ZPHP'] | js.smartapesg | [] | 2026-09-02 | | | |
| | | redshell | [] | elf.redshell | [] | 2026-09-01 | | | |
| | | CECbot | [] | apk.cecbot | [] | 2026-08-31 | | | |
| | | Auto-Color | [] | elf.auto_color | [] | 2026-08-31 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2025-11-21 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2026-08-31 | | | |
| | | SNAPPYBEE | ['Deed RAT', 'POISONPLUG.DEED'] | win.snappybee | ['Earth Estries'] | 2026-08-28 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT17', 'APT23', 'APT41', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA', 'Webworm'] | 2026-08-28 | | | |
| | | BloodAlchemy | [] | win.bloodalchemy | [] | 2026-08-28 | | | |
| | | OtterCandy | ['HardHatRAT', 'UNSEENMINK'] | js.ottercandy | ['WageMole'] | 2026-07-17 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2026-07-20 | | | |
| | | Babadeda | [] | win.babadeda | [] | 2026-08-24 | | | |
| | | HypeAgent | [] | win.hype_agent | [] | 2026-08-20 | | | |
| | | NeedleStealer | [] | win.needle_stealer | [] | 2026-08-20 | | | |
| | | C2Looper | [] | win.c2looper | [] | 2026-08-20 | | | |
| | | PhantomGraph | [] | win.phantomgraph | ['Head Mare'] | 2026-08-13 | | | |
| | | JADESNOW | ['ChainedDown'] | js.jadesnow | ['WageMole'] | 2026-08-13 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2026-08-13 | | | |
| | | TELEPUZ | [] | win.telepuz | [] | 2026-08-13 | | | |
| | | DRATzarus | ['ThreatNeedle', 'ThreatNeedleTea'] | win.dratzarus | ['Lazarus Group'] | 2026-08-07 | | | |
| | | CRAT | [] | win.crat | ['Lazarus Group'] | 2026-08-07 | | | |
| | | MeowBackConn | [] | win.meowbackconn | [] | 2026-09-07 | | | |
| | | PureMiner | [] | win.pureminer | [] | 2026-09-07 | | | |
| | | AnimateClipper | [] | win.animate_clipper | [] | 2026-08-03 | | | |
| | | 1337_GTWK | [] | elf.1337_gtwk_rootkit | [] | 2026-08-03 | | | |
| | | Gunra | [] | win.gunra | [] | 2026-08-03 | | | |
| | | ChocoShell | [] | ps1.choco_shell | ['APT29'] | 2026-08-03 | | | |
| | | CornFlake | [] | win.cornflake | ['APT29'] | 2026-08-03 | | | |
| | | Potemkin | [] | win.potemkin | [] | 2026-07-31 | | | |
| | | MetaStealer | [] | win.metastealer | ['UNC5537'] | 2026-07-31 | | | |
| | | Chisel | [] | win.chisel | [] | 2026-07-31 | | | |
| | | TriangleDB | [] | ios.triangledb | [] | 2026-07-28 | | | |