| | | FakeWord | [] | win.fakeword | [] | 2020-08-12 | | | |
| | | fancyfilter | ['0xFancyFilter'] | win.fancyfilter | ['Equation Group'] | 2021-02-06 | | | |
| | | Fanny | ['DEMENTIAWHEEL'] | win.fanny | ['Equation Group'] | 2022-05-23 | | | |
| | | Farseer | [] | win.farseer | [] | 2020-03-02 | | | |
| | | FastPOS | [] | win.fast_pos | [] | 2020-08-05 | | | |
| | | FatalRat | ['Sainbox RAT'] | win.fatal_rat | [] | 2023-09-22 | | | |
| | | FatDuke | [] | win.fatduke | ['APT29'] | 2020-05-23 | | | |
| | | FCT | [] | win.fct | [] | 2020-02-10 | | | |
| | | FeedLoad | [] | win.feed_load | ['Lazarus Group'] | 2023-10-20 | | | |
| | | Felismus | [] | win.felismus | ['Sowbug'] | 2017-11-21 | | | |
| | | fengine | [] | win.fengine | [] | 2022-08-22 | | | |
| | | Ficker Stealer | [] | win.fickerstealer | [] | 2022-11-09 | | | |
| | | Final1stSpy | [] | win.final1stspy | ['APT37'] | 2018-10-23 | | | |
| | | FindPOS | ['Poseidon'] | win.findpos | [] | 2021-09-19 | | | |
| | | FinFisher RAT | ['FinSpy'] | win.finfisher | [] | 2023-03-24 | | | |
| | | Fireball | [] | win.fireball | [] | 2017-07-11 | | | |
| | | Fire Chili | [] | win.firechili | ['Shell Crew'] | 2022-04-04 | | | |
| | | FishMaster | ['JollyJellyfish'] | win.fishmaster | ['Earth Lusca'] | 2023-04-28 | | | |
| | | FK_Undead | ['Undead'] | win.fk_undead | [] | 2024-10-14 | | | |
| | | Flagpro | ['BUSYICE'] | win.flagpro | ['BlackTech'] | 2023-05-21 | | | |
| | | Flame | ['sKyWIper'] | win.flame | [] | 2023-10-05 | | | |
| | | FLASHFLOOD | [] | win.flashflood | ['APT 30'] | 2022-08-25 | | | |
| | | FlashDevelop | [] | win.flash_develop | ['Handala'] | 2024-10-18 | | | |
| | | FlawedAmmyy | [] | win.flawedammyy | ['TA505'] | 2022-02-14 | | | |
| | | FlawedGrace | ['GraceWire'] | win.flawedgrace | ['TA505'] | 2024-08-29 | | | |
| | | FlokiBot | [] | win.floki_bot | [] | 2018-01-22 | | | |
| | | FlowerShop | [] | win.flowershop | [] | 2020-05-07 | | | |
| | | Flusihoc | [] | win.flusihoc | [] | 2017-10-09 | | | |
| | | FlyingDutchman | [] | win.flying_dutchman | ['Calypso group'] | 2019-11-12 | | | |
| | | Fobber | [] | win.fobber | [] | 2017-08-01 | | | |
| | | FONIX | [] | win.fonix | [] | 2021-05-04 | | | |
| | | ForestTiger | ['ScoringMathTea'] | win.forest_tiger | ['Lazarus Group'] | 2023-12-19 | | | |
| | | SuppoBox | ['Bayrob', 'Nivdort', 'pizd'] | win.suppobox | [] | 2024-05-17 | | | |
| | | SVCReady | [] | win.svcready | [] | 2023-06-09 | | | |
| | | swen | [] | win.swen | [] | 2019-07-31 | | | |
| | | Sword | [] | win.sword | ['Comment Crew'] | 2018-02-13 | | | |
| | | sykipot | ['getkys', 'Wkysol'] | win.sykipot | ['Samurai Panda'] | 2022-03-07 | | | |
| | | SyncCrypt | [] | win.synccrypt | [] | 2017-09-14 | | | |
| | | SynFlooder | [] | win.synflooder | ['Cleaver'] | 2017-05-21 | | | |
| | | Sys10 | [] | win.sys10 | ['Naikon'] | | | | |
| | | Syscon | [] | win.syscon | [] | 2020-02-04 | | | |
| | | SysGet | [] | win.sysget | ['DragonOK'] | 2021-04-29 | | | |
| | | SysJoker | [] | win.sysjoker | [] | 2024-01-05 | | | |
| | | Sysraw Stealer | ['Clipsa'] | win.sysraw_stealer | [] | 2019-08-07 | | | |
| | | T34loader | [] | win.t34loader | [] | 2024-02-02 | | | |
| | | TabMsgSQL | [] | win.tabmsgsql | ['Comment Crew'] | 2018-02-13 | | | |
| | | taidoor | ['simbot'] | win.taidoor | [] | 2022-03-07 | | | |
| | | TAINTEDSCRIBE | [] | win.taintedscribe | [] | 2020-06-23 | | | |
| | | Taleret | [] | win.taleret | [] | 2018-02-10 | | | |
| | | Tandfuy | [] | win.tandfuy | [] | 2018-07-24 | | | |
| | | Tapaoux | [] | win.tapaoux | ['DarkHotel'] | 2018-05-03 | | | |
| | | Tarsip | [] | win.tarsip | ['Comment Crew'] | 2018-02-10 | | | |
| | | Taurus Stealer | [] | win.taurus_stealer | [] | 2023-08-07 | | | |
| | | TClient | ['FIRESHADOW'] | win.tclient | ['Pirate Panda'] | 2020-06-05 | | | |
| | | TelB | [] | win.telb | [] | 2020-09-21 | | | |
| | | TeleBot | [] | win.telebot | ['TeleBots', 'Sandworm'] | 2022-08-25 | | | |
| | | Teleport | [] | win.teleport | ['TA505'] | 2022-12-12 | | | |
| | | TellYouThePass | [] | win.tellyouthepass | [] | 2023-06-09 | | | |
| | | Tempedreve | [] | win.tempedreve | [] | 2016-04-20 | | | |
| | | TempStealer | [] | win.temp_stealer | [] | 2022-11-21 | | | |
| | | Terminator RAT | ['Fakem RAT'] | win.terminator_rat | [] | 2018-01-21 | | | |
| | | Termite | [] | win.termite | [] | 2022-06-27 | | | |
| | | TeslaCrypt | ['cryptesla'] | win.teslacrypt | [] | 2023-06-09 | | | |
| | | TFlower | [] | win.tflower | [] | 2021-03-04 | | | |
| | | Thanatos | ['Alphabot'] | win.thanatos | [] | 2017-01-05 | | | |
| | | Thanatos Ransomware | [] | win.thanatos_ransom | [] | 2018-07-05 | | | |
| | | ThreeByte | [] | win.threebyte | ['IXESHE'] | 2017-05-21 | | | |
| | | ThumbThief | [] | win.thumbthief | [] | | | | |
| | | ThunderX | ['Ranzy Locker'] | win.thunderx | [] | 2022-01-24 | | | |
| | | Thunker | [] | win.thunker | [] | 2018-07-24 | | | |
| | | Tidepool | [] | win.tidepool | ['Mirage'] | 2023-01-25 | | | |
| | | TigerLite | [] | win.tigerlite | ['Silent Chollima'] | 2024-08-15 | | | |
| | | Tiger RAT | [] | win.tiger_rat | ['Silent Chollima'] | 2024-08-15 | | | |
| | | tildeb | [] | win.tildeb | ['Equation Group'] | 2021-09-19 | | | |
| | | Tinba | ['Zusy', 'TinyBanker', 'Illi'] | win.tinba | [] | 2022-06-09 | | | |
| | | TinyFluff | [] | win.tinyfluff | [] | 2023-07-12 | | | |
| | | TinyLoader | [] | win.tinyloader | ['Tiny Spider'] | 2020-07-24 | | | |
| | | TinyMet | ['TiniMet'] | win.tinymet | ['Anunak', 'TA505'] | 2023-08-03 | | | |
| | | TinyNuke | ['NukeBot', 'Nuclear Bot', 'MicroBankingTrojan', 'Xbot'] | win.tinynuke | [] | 2022-08-28 | | | |
| | | TinyTurlaNG | ['TTNG'] | win.tinyturla_ng | ['Turla'] | 2024-10-21 | | | |
| | | TinyTyphon | [] | win.tinytyphon | ['Dropping Elephant'] | 2020-04-06 | | | |
| | | Tiop | [] | win.tiop | [] | 2018-07-24 | | | |
| | | Tmanger | ['LuckyBack'] | win.tmanger | ['TA428'] | 2024-10-15 | | | |
| | | Tofsee | ['Gheg'] | win.tofsee | [] | 2023-10-17 | | | |
| | | TokyoX | [] | win.tokyox | [] | 2022-01-18 | | | |
| | | TONEDEAF | [] | win.tonedeaf | ['APT34'] | 2021-04-10 | | | |
| | | TONERJAM | [] | win.tonerjam | [] | 2024-10-29 | | | |
| | | TorrentLocker | ['Teerac'] | win.torrentlocker | [] | 2021-09-19 | | | |
| | | TorLoader | [] | win.tor_loader | [] | 2023-07-11 | | | |
| | | TOUCHMOVE | [] | win.touchmove | ['Lazarus Group'] | 2023-11-27 | | | |
| | | TransBox | [] | win.transbox | [] | 2023-02-17 | | | |
| | | TreasureHunter | ['huntpos'] | win.treasurehunter | [] | 2018-05-14 | | | |
| | | Trochilus RAT | [] | win.trochilus_rat | ['APT31', 'GALLIUM', 'Stone Panda'] | 2022-09-20 | | | |
| | | Troldesh | ['Shade'] | win.troldesh | [] | 2023-05-02 | | | |
| | | Troll Stealer | [] | win.troll_stealer | ['Kimsuky'] | 2024-02-09 | | | |
| | | Tuoni | [] | win.tuoni | [] | 2024-05-14 | | | |
| | | turian | [] | win.turian | [] | 2023-06-09 | | | |
| | | TurlaRPC | [] | win.turla_rpc | ['Turla'] | 2022-12-01 | | | |
| | | Turla SilentMoon | ['BigBoss', 'Cacao', 'GoldenSky', 'HyperStack'] | win.turla_silentmoon | ['Turla'] | 2022-12-01 | | | |
| | | TURNEDUP | ['Notestuk'] | win.turnedup | ['APT33'] | 2020-08-21 | | | |