| | | Yahoyah | ['KeyBoy'] | win.yahoyah | ['Pirate Panda'] | 2017-02-15 | | | |
| | | Yakuza | ['Teslarvng Ransomware'] | win.yakuza_ransomware | [] | 2020-03-27 | | | |
| | | Yanluowang | ['Dryxiphia'] | win.yanluowang | [] | 2023-06-09 | | | |
| | | YaRAT | [] | win.yarat | ['APT31'] | 2022-08-15 | | | |
| | | yayih | ['bbsinfo', 'aumlib'] | win.yayih | [] | 2018-09-19 | | | |
| | | YiBackdoor | [] | win.yibackdoor | [] | 2025-09-24 | | | |
| | | Ymir | [] | win.ymir | [] | 2025-03-21 | | | |
| | | Yoddos | [] | win.yoddos | [] | 2019-07-12 | | | |
| | | Yokai | [] | win.yokai | ['MUSTANG PANDA'] | 2025-09-23 | | | |
| | | YoreKey | [] | win.yorekey | ['Kimsuky'] | 2021-12-15 | | | |
| | | YoungLotus | ['DarkShare'] | win.younglotus | [] | 2018-05-28 | | | |
| | | yty | [] | win.yty | ['APT-C-35', 'Donot Team', 'Viceroy Tiger'] | 2022-01-18 | | | |
| | | ZarDoor | [] | win.zardoor | [] | 2024-03-04 | | | |
| | | Zebrocy | ['Zekapab'] | win.zebrocy | ['APT28'] | 2024-07-10 | | | |
| | | Zedhou | [] | win.zedhou | [] | 2018-07-24 | | | |
| | | zenar | [] | win.zenar | [] | 2021-05-11 | | | |
| | | Zeoticus | [] | win.zeoticus | [] | 2021-02-04 | | | |
| | | ZeroAccess | ['Max++', 'Sirefef', 'Smiscer', 'ZAccess'] | win.zeroaccess | [] | 2025-07-24 | | | |
| | | ZeroCleare | [] | win.zerocleare | ['OilRig'] | 2023-01-19 | | | |
| | | ZeroT | [] | win.zerot | [] | 2017-02-04 | | | |
| | | Zeus | ['Zbot'] | win.zeus | [] | 2024-03-12 | | | |
| | | ZeusAction | [] | win.zeus_action | [] | 2021-02-01 | | | |
| | | Zeus MailSniffer | [] | win.zeus_mailsniffer | [] | 2016-12-28 | | | |
| | | Zeus OpenSSL | ['XSphinx'] | win.zeus_openssl | [] | 2020-04-01 | | | |
| | | Zeus Sphinx | [] | win.zeus_sphinx | [] | 2022-09-21 | | | |
| | | ZhCat | [] | win.zhcat | [] | 2018-04-17 | | | |
| | | ZitMo | ['ZeuS-in-the-Mobile'] | win.zitmo | [] | 2021-05-25 | | | |
| | | ZiyangRAT | [] | win.ziyangrat | [] | 2020-05-27 | | | |
| | | Zloader | ['DELoader', 'SILENTNIGHT', 'Terdot'] | win.zloader | [] | 2025-02-25 | | | |
| | | Zlob | [] | win.zlob | [] | 2020-12-14 | | | |
| | | Zumanek | [] | win.zumanek | [] | 2022-01-05 | | | |
| | | Zupdax | [] | win.zupdax | [] | 2022-05-25 | | | |
| | | ZxxZ | ['MuuyDownloader'] | win.zxxz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | ['Vanilla Tempest'] | 2025-09-23 | | | |
| | | T34loader | [] | win.t34loader | [] | 2024-02-02 | | | |
| | | TabMsgSQL | [] | win.tabmsgsql | ['Comment Crew'] | 2018-02-13 | | | |
| | | taidoor | ['simbot'] | win.taidoor | [] | 2022-03-07 | | | |
| | | TAINTEDSCRIBE | [] | win.taintedscribe | [] | 2020-06-23 | | | |
| | | Taleret | [] | win.taleret | [] | 2018-02-10 | | | |
| | | Tandfuy | [] | win.tandfuy | [] | 2018-07-24 | | | |
| | | Tapaoux | [] | win.tapaoux | ['DarkHotel'] | 2018-05-03 | | | |
| | | TargetCompany | ['Fargo', 'Mallox', 'Tohnichi'] | win.targetcompany | [] | 2025-04-25 | | | |
| | | Tarsip | [] | win.tarsip | ['Comment Crew'] | 2018-02-10 | | | |
| | | Taurus Stealer | [] | win.taurus_stealer | [] | 2023-08-07 | | | |
| | | TClient | ['FIRESHADOW'] | win.tclient | ['Pirate Panda'] | 2020-06-05 | | | |
| | | TelB | [] | win.telb | [] | 2020-09-21 | | | |
| | | TeleBot | [] | win.telebot | ['TeleBots', 'Sandworm'] | 2022-08-25 | | | |
| | | Teleport | [] | win.teleport | ['TA505'] | 2022-12-12 | | | |
| | | TellYouThePass | [] | win.tellyouthepass | [] | 2023-06-09 | | | |
| | | Tempedreve | [] | win.tempedreve | [] | 2016-04-20 | | | |
| | | TempStealer | [] | win.temp_stealer | [] | 2022-11-21 | | | |
| | | Tendyron | [] | win.tendyron_dropper | ['TA410'] | 2025-10-15 | | | |
| | | Terminator RAT | ['Fakem RAT'] | win.terminator_rat | [] | 2018-01-21 | | | |
| | | Termite | [] | win.termite | [] | 2022-06-27 | | | |
| | | TerraStealer | ['StealerOne', 'SONE', 'Taurus Loader Stealer Module'] | win.terra_stealer | ['VENOM SPIDER', 'FIN6'] | 2025-05-12 | | | |
| | | TeslaCrypt | ['cryptesla'] | win.teslacrypt | [] | 2023-06-09 | | | |
| | | Tetra Loader | [] | win.tetra_loader | [] | 2025-05-26 | | | |
| | | TFlower | [] | win.tflower | [] | 2021-03-04 | | | |
| | | Thanatos | ['Alphabot'] | win.thanatos | [] | 2017-01-05 | | | |
| | | Thanatos Ransomware | [] | win.thanatos_ransom | [] | 2018-07-05 | | | |
| | | ThreeByte | [] | win.threebyte | ['IXESHE'] | 2017-05-21 | | | |
| | | ThumbThief | [] | win.thumbthief | [] | | | | |
| | | ThunderX | ['Ranzy Locker'] | win.thunderx | [] | 2022-01-24 | | | |
| | | Thunker | [] | win.thunker | [] | 2018-07-24 | | | |
| | | Tidepool | [] | win.tidepool | ['Mirage'] | 2023-01-25 | | | |
| | | TigerLite | [] | win.tigerlite | ['Silent Chollima'] | 2024-08-15 | | | |
| | | Tiger RAT | [] | win.tiger_rat | ['Silent Chollima'] | 2024-08-15 | | | |
| | | tildeb | [] | win.tildeb | ['Equation Group'] | 2021-09-19 | | | |
| | | Tinba | ['Zusy', 'TinyBanker', 'Illi'] | win.tinba | [] | 2022-06-09 | | | |
| | | TinyFluff | [] | win.tinyfluff | [] | 2023-07-12 | | | |
| | | TinyLoader | [] | win.tinyloader | ['Tiny Spider'] | 2020-07-24 | | | |
| | | TinyMet | ['TiniMet'] | win.tinymet | ['Anunak', 'TA505'] | 2023-08-03 | | | |
| | | TinyNuke | ['NukeBot', 'Nuclear Bot', 'MicroBankingTrojan', 'Xbot'] | win.tinynuke | [] | 2022-08-28 | | | |
| | | TinyTurlaNG | ['TTNG'] | win.tinyturla_ng | ['Turla'] | 2024-10-21 | | | |
| | | TinyTyphon | [] | win.tinytyphon | ['Dropping Elephant'] | 2020-04-06 | | | |
| | | TinyTurla | [] | win.tiny_turla | ['Turla'] | 2023-10-05 | | | |
| | | Tiop | [] | win.tiop | [] | 2018-07-24 | | | |
| | | Tmanger | ['LuckyBack'] | win.tmanger | ['TA428'] | 2024-10-15 | | | |
| | | Tofsee | ['Gheg'] | win.tofsee | [] | 2023-10-17 | | | |
| | | TokyoX | [] | win.tokyox | [] | 2022-01-18 | | | |
| | | TOLLBOOTH | ['HijackServer IIS'] | win.tollbooth | [] | 2025-10-22 | | | |
| | | TONEDEAF | [] | win.tonedeaf | ['APT34'] | 2021-04-10 | | | |
| | | TONERJAM | [] | win.tonerjam | [] | 2024-10-29 | | | |
| | | Topinambour | [] | win.topinambour | [] | 2023-04-26 | | | |
| | | Torisma | [] | win.torisma | ['Lazarus Group'] | 2024-11-29 | | | |
| | | TorrentLocker | ['Teerac'] | win.torrentlocker | [] | 2021-09-19 | | | |
| | | TorLoader | [] | win.tor_loader | [] | 2023-07-11 | | | |
| | | TOUCHMOVE | [] | win.touchmove | ['Lazarus Group'] | 2023-11-27 | | | |
| | | TOUGHPROGRESS | [] | win.toughprogress | ['APT41'] | 2025-06-02 | | | |
| | | TransBox | [] | win.transbox | [] | 2023-02-17 | | | |
| | | TransferLoader | [] | win.transferloader | [] | 2025-11-25 | | | |
| | | TreasureHunter | ['huntpos'] | win.treasurehunter | [] | 2018-05-14 | | | |
| | | TrickBot | ['Trickster', 'TheTrick', 'TrickLoader'] | win.trickbot | ['TA505', 'UNC1878', 'WIZARD SPIDER'] | 2025-06-18 | | | |
| | | Trochilus RAT | [] | win.trochilus_rat | ['APT31', 'GALLIUM', 'Stone Panda'] | 2022-09-20 | | | |
| | | Troldesh | ['Shade'] | win.troldesh | [] | 2023-05-02 | | | |
| | | Troll Stealer | [] | win.troll_stealer | ['Kimsuky'] | 2024-02-09 | | | |
| | | Tropidoor | [] | win.tropidoor | ['WageMole'] | 2025-10-20 | | | |
| | | Tuoni | [] | win.tuoni | [] | 2024-05-14 | | | |
| | | turian | [] | win.turian | [] | 2023-06-09 | | | |
| | | TurlaRPC | [] | win.turla_rpc | ['Turla'] | 2022-12-01 | | | |