| | | More_eggs | ['SpicyOmelette', 'SKID'] | js.more_eggs | ['Cobalt', 'FIN6', 'VENOM SPIDER'] | 2025-12-22 | | | |
| | | PUMAKIT | ['PUMA', 'Kitsune'] | elf.pumakit | [] | 2025-12-19 | | | |
| | | AlmondRAT | [] | win.almondrat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | CountLoader | [] | win.count_loader | [] | 2025-12-19 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2025-12-19 | | | |
| | | EtherRAT | [] | js.ether_rat | [] | 2025-12-17 | | | |
| | | Flesh Stealer | [] | win.flesh_stealer | [] | 2025-12-15 | | | |
| | | SalatStealer | [] | win.salatstealer | [] | 2025-12-15 | | | |
| | | Phemedrone Stealer | ['Ov3r_Stealer'] | win.phemedrone_stealer | [] | 2025-12-15 | | | |
| | | GamaWiper | [] | vbs.gamawiper | ['Gamaredon Group'] | 2025-12-12 | | | |
| | | DroidLock | [] | apk.droidlock | [] | 2025-12-11 | | | |
| | | CASTLELOADER | [] | win.castleloader | [] | 2025-12-11 | | | |
| | | Chaos | ['FakeRyuk', 'RyukJoke', 'Yashma'] | win.chaos | [] | 2025-12-11 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2025-12-11 | | | |
| | | GhostPenguin | [] | elf.ghostpenguin | [] | 2025-12-11 | | | |
| | | BRICKSTORM | [] | elf.brickstorm | ['UTA0178'] | 2025-12-08 | | | |
| | | Poco RAT | [] | win.poco_rat | [] | 2025-12-08 | | | |
| | | Gaganode | [] | apk.gaganode | [] | 2025-12-08 | | | |
| | | Gaganode | [] | elf.gaganode | [] | 2025-12-08 | | | |
| | | Gaganode | [] | win.gaganode | [] | 2025-12-08 | | | |
| | | Phantom Stealer | [] | win.phantom_stealer | [] | 2025-12-08 | | | |
| | | KrustyLoader | [] | elf.krustyloader | [] | 2025-12-08 | | | |
| | | FireWood | [] | elf.firewood | ['Gelsemium'] | 2025-09-09 | | | |
| | | ShadowV2 | [] | elf.shadowv2 | [] | 2025-11-28 | | | |
| | | DarkWatchman | [] | js.darkwatchman | [] | 2025-11-28 | | | |
| | | dynamichttp | [] | win.dynamichttp | ['RomCom'] | 2025-11-26 | | | |
| | | PteroGraphin | [] | ps1.ptero_graphin | ['Gamaredon Group'] | 2025-11-26 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-11-26 | | | |
| | | AndroRAT | [] | apk.androrat | [] | 2025-11-26 | | | |
| | | VIP Keylogger | [] | win.vipkeylogger | [] | 2025-11-26 | | | |
| | | Hook | [] | apk.hook | [] | 2025-11-25 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2025-11-25 | | | |
| | | GAMYBEAR | [] | win.gamybear | [] | 2025-11-21 | | | |
| | | Sturnus | [] | apk.sturnus | [] | 2025-11-21 | | | |
| | | LittleDaemon | [] | elf.little_daemon | ['PlushDaemon'] | 2025-11-21 | | | |
| | | EdgeStepper | [] | elf.edgestepper | ['PlushDaemon'] | 2025-11-21 | | | |
| | | tsunami | [] | win.tsunami | ['Lazarus Group'] | 2025-11-21 | | | |
| | | TsunamiKit | [] | win.tsunamikit | ['WageMole'] | 2025-11-21 | | | |
| | | Pureland | [] | osx.pureland | [] | 2025-11-19 | | | |
| | | KeySteal | [] | osx.keysteal | [] | 2025-11-19 | | | |
| | | EggShell RAT | [] | osx.eggshell_rat | [] | 2025-11-19 | | | |
| | | CloudMensis | ['BadRAT'] | osx.cloud_mensis | [] | 2025-11-19 | | | |
| | | Odyssey Stealer | [] | osx.odyssey_stealer | [] | 2025-11-19 | | | |
| | | Poseidon Stealer | ['Rodrigo Stealer'] | osx.poseidonstealer | [] | 2025-11-19 | | | |
| | | Warp Stealer | [] | win.warp_stealer | [] | 2025-11-19 | | | |
| | | RONINGLOADER | [] | win.roningloader | [] | 2025-11-18 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2025-03-10 | | | |
| | | GodRAT | [] | win.godrat | ['APT41'] | 2025-11-18 | | | |
| | | Beavertail | [] | win.beavertail | ['WageMole'] | 2025-11-17 | | | |
| | | PXA Stealer | ['PXAStealer', 'PXA'] | py.pxa_stealer | [] | 2025-11-17 | | | |
| | | TAMECAT | [] | vbs.tamecat | ['APT42'] | 2025-11-14 | | | |
| | | SilentSweeper | [] | win.silent_sweeper | [] | 2025-11-13 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2025-11-13 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2025-11-13 | | | |
| | | Unidentified 093 (Sidewinder) | [] | win.unidentified_093 | ['RAZOR TIGER'] | 2025-11-13 | | | |
| | | RunForestRun | ['Blackhole', 'Sutra'] | js.runforestrun | [] | 2025-11-13 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2025-11-13 | | | |
| | | Unidentified PS 005 (Telegram Bot) | [] | ps1.unidentified_005 | ['YoroTrooper'] | 2025-11-13 | | | |
| | | LANDFALL | [] | apk.landfall | [] | 2025-11-09 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2025-11-05 | | | |
| | | Dante | [] | win.dante | [] | 2025-11-05 | | | |
| | | BQTlock | [] | elf.bqtlock | [] | 2025-11-05 | | | |
| | | PolarEdge | [] | elf.polaredge | [] | 2025-11-05 | | | |
| | | LinkPro | [] | elf.linkpro | [] | 2025-11-03 | | | |
| | | wAgentTea | ['wAgent'] | win.wagenttea | ['Lazarus Group'] | 2025-10-31 | | | |
| | | DracuLoader | [] | win.dracu_loader | ['Earth Estries'] | 2025-10-29 | | | |
| | | BUSHWALK | [] | elf.bushwalk | [] | 2025-10-28 | | | |
| | | PITFUEL | [] | elf.pitfuel | [] | 2025-10-28 | | | |
| | | PITSOCK | [] | elf.pitsock | [] | 2025-10-28 | | | |
| | | PITHOOK | [] | elf.pithook | [] | 2025-10-28 | | | |
| | | Kubo Injector | [] | elf.kubo_injector | [] | 2025-10-28 | | | |
| | | Princess | [] | apk.princess | [] | 2025-10-24 | | | |
| | | GlassWorm | [] | js.glassworm | [] | 2025-10-21 | | | |
| | | YESROBOT | [] | win.yesrobot | ['Callisto'] | 2025-10-22 | | | |
| | | vGet | [] | elf.vget | [] | 2025-10-20 | | | |
| | | Bofamet | [] | win.bofamet | [] | 2025-10-21 | | | |
| | | TONESHELL | [] | win.toneshell | ['MUSTANG PANDA'] | 2025-09-23 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | ClipBanker | [] | win.clipbanker | [] | 2025-10-20 | | | |
| | | CHINACHOPPER | [] | win.chinachopper | ['APT41', 'EMISSARY PANDA', 'GALLIUM', 'HAFNIUM', 'Hurricane Panda', 'Leviathan'] | 2025-10-20 | | | |
| | | BellaCiao | [] | win.bellaciao | [] | 2025-10-15 | | | |
| | | Pantegana | [] | win.pantegana | [] | 2025-10-15 | | | |
| | | Leslieloader | [] | win.leslieloader | [] | 2025-10-15 | | | |
| | | SparkRAT | [] | win.spark_rat | [] | 2025-10-15 | | | |
| | | MonsterV2 | ['Aurotun Stealer'] | win.monsterv2 | [] | 2025-10-15 | | | |
| | | FlowCloud | [] | win.flowcloud | ['Stone Panda'] | 2025-10-15 | | | |
| | | x4 | [] | win.x4 | [] | 2025-10-15 | | | |
| | | Soul | ['SoulSearcher'] | win.soul | [] | 2025-10-15 | | | |
| | | SoulSearcher | [] | win.soulsearcher | ['SharpPanda'] | 2025-10-15 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2025-10-15 | | | |
| | | Akira | ['REDBIKE'] | elf.akira | ['Storm-1567'] | 2025-10-01 | | | |
| | | AllaKore | [] | win.allakore | [] | 2025-09-30 | | | |
| | | BaoLoader | [] | win.baoloader | [] | 2025-09-23 | | | |
| | | BTMOB RAT | [] | apk.btmob | [] | 2025-09-23 | | | |
| | | SystemBC | [] | elf.systembc | [] | 2025-09-23 | | | |
| | | BeaverTail | [] | osx.beavertail | [] | 2025-09-22 | | | |
| | | ContagiousDrop | [] | js.contagious_drop | [] | 2025-09-16 | | | |
| | | RandomQuery | [] | ps1.randomquery | ['Kimsuky'] | 2025-09-16 | | | |
| | | SimpleTea | ['PondRAT', 'SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2025-09-15 | | | |
| | | GONEPOSTAL | ['Cordyceps', 'NOTDOOR'] | win.gonepostal | ['APT28'] | 2025-09-12 | | | |