| | | Valkyrie Stealer | [] | win.valkyrie_stealer | [] | 2025-12-15 | | | |
| | | MiniJunk | [] | win.minijunk | [] | 2025-12-15 | | | |
| | | MiniBrowse | [] | win.minibrowse | [] | 2025-12-15 | | | |
| | | MINIBIKE | [] | win.minibike | [] | 2025-12-15 | | | |
| | | STOWAWAY | [] | win.stowaway | [] | 2025-12-15 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | ['Alpha Spider', 'RansomHub', 'Vanilla Tempest'] | 2025-12-15 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | ['Vanilla Tempest'] | 2025-12-15 | | | |
| | | RALord | [] | win.ralord | [] | 2025-12-15 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2025-12-15 | | | |
| | | Flesh Stealer | [] | win.flesh_stealer | [] | 2025-12-15 | | | |
| | | SalatStealer | [] | win.salatstealer | [] | 2025-12-15 | | | |
| | | DeathRansom | ['deathransom', 'wacatac'] | win.deathransom | [] | 2025-12-15 | | | |
| | | Phemedrone Stealer | ['Ov3r_Stealer'] | win.phemedrone_stealer | [] | 2025-12-15 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-12-15 | | | |
| | | GamaWiper | [] | vbs.gamawiper | ['Gamaredon Group'] | 2025-12-12 | | | |
| | | ROMCOM RAT | ['PEAPOD', 'SingleCamper', 'SnipBot'] | win.romcom_rat | [] | 2025-12-12 | | | |
| | | DroidLock | [] | apk.droidlock | [] | 2025-12-11 | | | |
| | | Shai-Hulud | [] | js.shai_hulud | [] | 2025-12-11 | | | |
| | | CASTLELOADER | [] | win.castleloader | [] | 2025-12-11 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2025-12-11 | | | |
| | | Chaos | ['FakeRyuk', 'RyukJoke', 'Yashma'] | win.chaos | [] | 2025-12-11 | | | |
| | | Keyhole | [] | win.keyhole | [] | 2025-12-11 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-12-11 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2025-12-11 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2025-12-11 | | | |
| | | Katz Stealer | [] | win.katz_stealer | [] | 2025-12-11 | | | |
| | | PhantomVAI | ['VMDetectLoader', 'Katz Stealer Loader'] | win.phantomvai | [] | 2025-12-11 | | | |
| | | Supper | ['SocksShell', 'ZAPCAT'] | win.supper | ['Vanilla Tempest'] | 2025-11-11 | | | |
| | | Aura Stealer | ['AURA Stealer', 'AURASTEAL'] | win.aurastealer | [] | 2025-12-11 | | | |
| | | GhostPenguin | [] | elf.ghostpenguin | [] | 2025-12-11 | | | |
| | | BRICKSTORM | [] | elf.brickstorm | ['UTA0178'] | 2025-12-08 | | | |
| | | Poco RAT | [] | win.poco_rat | [] | 2025-12-08 | | | |
| | | Gaganode | [] | apk.gaganode | [] | 2025-12-08 | | | |
| | | Gaganode | [] | elf.gaganode | [] | 2025-12-08 | | | |
| | | Gaganode | [] | win.gaganode | [] | 2025-12-08 | | | |
| | | Amadey | [] | win.amadey | [] | 2025-12-08 | | | |
| | | Bandook | ['Bandok'] | win.bandook | ['Dark Caracal'] | 2025-12-08 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2025-12-08 | | | |
| | | Phantom Stealer | [] | win.phantom_stealer | [] | 2025-12-08 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-12-08 | | | |
| | | KrustyLoader | [] | elf.krustyloader | [] | 2025-12-08 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-12-08 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-12-08 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2025-11-03 | | | |
| | | FireWood | [] | elf.firewood | ['Gelsemium'] | 2025-09-09 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-11-17 | | | |
| | | ShadowV2 | [] | elf.shadowv2 | [] | 2025-11-28 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2025-11-28 | | | |
| | | DarkWatchman | [] | js.darkwatchman | [] | 2025-11-28 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2025-11-28 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-11-28 | | | |
| | | dynamichttp | [] | win.dynamichttp | ['RomCom'] | 2025-11-26 | | | |
| | | Charon | [] | win.charon | [] | 2025-11-26 | | | |
| | | PteroGraphin | [] | ps1.ptero_graphin | ['Gamaredon Group'] | 2025-11-26 | | | |
| | | Pteranodon | ['Pterodo'] | win.pteranodon | ['Gamaredon Group', 'Operation Armageddon'] | 2025-11-26 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-11-26 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2025-11-26 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2025-11-26 | | | |
| | | AndroRAT | [] | apk.androrat | [] | 2025-11-26 | | | |
| | | VIP Keylogger | [] | win.vipkeylogger | [] | 2025-11-26 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2025-11-25 | | | |
| | | splitloader | [] | win.splitloader | [] | 2025-11-25 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2025-11-25 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-11-25 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2025-11-25 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-11-25 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2025-11-25 | | | |
| | | Hook | [] | apk.hook | [] | 2025-11-25 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2025-11-25 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2025-11-25 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-11-25 | | | |
| | | BianLian | [] | win.bianlian | [] | 2025-11-25 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-11-25 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-11-25 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2025-11-25 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-11-25 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2025-11-25 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-11-25 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2025-11-25 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-11-25 | | | |
| | | GreyEnergy | [] | win.grey_energy | ['GreyEnergy', 'TeleBots'] | 2025-11-25 | | | |
| | | MeltingClaw | [] | win.meltingclaw | [] | 2025-11-25 | | | |
| | | RustyClaw | [] | win.rusty_claw | ['RomCom'] | 2025-11-25 | | | |
| | | ShadyHammock | [] | win.shady_hammock | [] | 2025-11-25 | | | |
| | | TransferLoader | [] | win.transferloader | [] | 2025-11-25 | | | |
| | | SlipScreen | [] | win.slip_screen | ['RomCom'] | 2025-11-25 | | | |
| | | BURNBOOK | [] | win.burnbook | ['UNC2970'] | 2025-11-21 | | | |
| | | ScoringMathTea | [] | win.scoring_math_tea | ['Lazarus Group'] | 2025-11-21 | | | |
| | | QuanPinLoader | [] | win.quan_pin_loader | ['Lazarus Group'] | 2025-11-21 | | | |
| | | GAMYBEAR | [] | win.gamybear | [] | 2025-11-21 | | | |
| | | DragonBreath | [] | win.dragonbreath | [] | 2025-11-18 | | | |
| | | BADAUDIO | [] | win.badaudio | ['APT24'] | 2025-11-21 | | | |
| | | Sturnus | [] | apk.sturnus | [] | 2025-11-21 | | | |
| | | LittleDaemon | [] | elf.little_daemon | ['PlushDaemon'] | 2025-11-21 | | | |
| | | EdgeStepper | [] | elf.edgestepper | ['PlushDaemon'] | 2025-11-21 | | | |
| | | Venom RAT | [] | win.venom | [] | 2025-11-21 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2025-11-21 | | | |
| | | TsunamiKit | [] | win.tsunamikit | ['WageMole'] | 2025-11-21 | | | |
| | | tsunami | [] | win.tsunami | ['Lazarus Group'] | 2025-11-21 | | | |
| | | Kaolin RAT | ['KaolinTea'] | win.kaolin_rat | ['Lazarus Group'] | 2025-11-21 | | | |