| | | GammaLoad | [] | vbs.gammaload | ['Gamaredon Group'] | 2026-06-18 | | | |
| | | SilentRunLoader | [] | win.silent_run_loader | ['TA4922'] | 2026-06-18 | | | |
| | | RomulusLoader | [] | win.romulus_loader | ['TA4922'] | 2026-06-18 | | | |
| | | Sisron | [] | win.sisron | [] | 2026-06-18 | | | |
| | | BACKORDER | [] | win.backorder | ['Sandworm'] | 2026-06-18 | | | |
| | | WAVESHAPER | ['osx.curlyveiltea'] | osx.waveshaper | ['UNC1069'] | 2026-06-18 | | | |
| | | LegionRelay | [] | ps1.legion_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | PhantomRelay | [] | ps1.phantom_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | Banana RAT | [] | ps1.banana_rat | ['SHADOW-WATER-063'] | 2026-06-09 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2026-06-09 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2026-06-09 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2026-06-09 | | | |
| | | SILENTLOOP | [] | ps1.silentloop | [] | 2026-06-09 | | | |
| | | AGINGFLY | [] | win.agingfly | [] | 2026-06-09 | | | |
| | | RecJS | [] | js.recjs | [] | 2026-06-09 | | | |
| | | C0XMO | [] | elf.c0xmo | [] | 2026-06-08 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2026-05-27 | | | |
| | | Proslikefan | [] | js.proslikefan | [] | 2026-06-03 | | | |
| | | SUNBURST | ['Solorigate'] | win.sunburst | ['APT 29', 'UNC2452'] | 2026-06-02 | | | |
| | | TEARDROP | [] | win.teardrop | ['UNC2452'] | 2026-06-02 | | | |
| | | Calfbot | [] | sh.calfbot | ['[Unnamed group]'] | 2026-06-02 | | | |
| | | GRUNT | ['Covenant'] | win.grunt | [] | 2026-06-02 | | | |
| | | POOLRAT | ['SIMPLESEA', 'SIMPLETEA'] | osx.poolrat | ['Lazarus Group'] | 2026-06-02 | | | |
| | | SimpleTea | ['PondRAT', 'SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2026-06-02 | | | |
| | | Mirax | ['Astrinox', 'Mirax Bot', 'MiraxRAT'] | apk.mirax | [] | 2026-05-27 | | | |
| | | RemoteX | [] | win.remotex | [] | 2026-05-22 | | | |
| | | PXA Stealer | ['PXAStealer', 'PXA'] | py.pxa_stealer | ['CoralRaider'] | 2026-05-21 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2026-05-21 | | | |
| | | Slopoly | [] | ps1.slopoly | ['Hive0163'] | 2026-05-20 | | | |
| | | TCLBANKER | [] | win.tclbanker | [] | 2026-05-20 | | | |
| | | PicassoLoader | [] | win.picasso_loader | ['Ghostwriter'] | 2026-05-19 | | | |
| | | Payload | [] | elf.payload | [] | 2026-05-19 | | | |
| | | Zedhou | [] | win.zedhou | [] | 2018-07-24 | | | |
| | | Xloader | ['Formbook'] | osx.xloader | [] | 2026-05-18 | | | |
| | | TrickMo | [] | apk.trickmo | [] | 2026-05-18 | | | |
| | | ZionSiphon | [] | win.zionsiphon | [] | 2026-05-18 | | | |
| | | OSAMiner | [] | osx.osaminer | [] | 2026-05-18 | | | |
| | | PeerTime | [] | elf.peer_time | ['UAT-9244'] | 2026-05-11 | | | |
| | | Eternidade Stealer | [] | win.eternidade_stealer | [] | 2026-05-13 | | | |
| | | TernDoor | [] | win.terndoor | ['UAT-9244'] | 2026-05-11 | | | |
| | | BruteEntry | [] | elf.brute_entry | ['UAT-9244'] | 2026-05-11 | | | |
| | | GRIDTIDE | [] | elf.gridtide | ['UNC2814'] | 2026-05-11 | | | |
| | | Tsundere | ['DinDoor'] | js.tsundere | ['MuddyWater'] | 2026-05-08 | | | |
| | | MicroStealer | [] | jar.microstealer | [] | 2026-05-08 | | | |
| | | LucidRook | [] | win.lucidrook | [] | 2026-05-08 | | | |
| | | LucidKnight | [] | win.lucidknight | [] | 2026-05-08 | | | |
| | | SpyFRPTunnel | ['fvncBot'] | apk.spyfrptunnel | [] | 2026-05-08 | | | |
| | | SafePay | [] | win.safepay | [] | 2026-05-08 | | | |
| | | Babuk | [] | elf.babuk | [] | 2026-05-08 | | | |
| | | DracuLoader | [] | win.dracu_loader | ['Earth Estries'] | 2026-05-08 | | | |
| | | Phantom Stealer | [] | win.phantom_stealer | [] | 2026-05-08 | | | |
| | | ProSpy | [] | apk.prospy | ['HAZY TIGER'] | 2026-05-06 | | | |
| | | VoltStealer | [] | win.voltstealer | [] | 2026-05-06 | | | |
| | | HanGhost | [] | win.hanghost | [] | 2026-05-06 | | | |
| | | AGEWHEEZE | [] | win.agewheeze | ['Cyber Serp'] | 2026-05-06 | | | |
| | | ABCDoor | [] | win.abcdoor | [] | 2026-05-06 | | | |
| | | QLNX | ['Quasar Linux RAT'] | elf.qlnx | [] | 2026-05-05 | | | |
| | | Macaw | [] | win.macaw | [] | 2026-05-05 | | | |
| | | SNOWBASIN | [] | py.snowbasin | ['UNC6692'] | 2026-05-05 | | | |
| | | POWERSTATS | ['Valyria'] | ps1.powerstats | ['MuddyWater'] | 2026-05-05 | | | |
| | | PowGoop | [] | ps1.powgoop | ['MuddyWater'] | 2026-05-05 | | | |
| | | STARWHALE | ['Canopy', 'SloughRAT'] | vbs.starwhale | ['MuddyWater'] | 2026-05-05 | | | |
| | | GRAMDOOR | ['Small Sieve'] | win.gramdoor | ['MuddyWater'] | 2026-05-05 | | | |
| | | RandomQuery | [] | vbs.randomquery | ['Kimsuky'] | 2026-05-05 | | | |
| | | RandomQuery | [] | ps1.randomquery | ['Kimsuky'] | 2026-05-05 | | | |
| | | SmartLoader | [] | win.smartloader | [] | 2026-05-05 | | | |
| | | Stealerium | [] | win.stealerium | [] | 2026-05-05 | | | |
| | | 3snake | [] | elf.3snake | [] | 2026-05-04 | | | |
| | | SHEETCREEP | [] | win.sheetcreep | [] | 2026-01-29 | | | |
| | | Albiriox | [] | apk.albiriox | [] | 2026-04-22 | | | |
| | | FriendlyFerret | [] | osx.friendlyferret | ['WageMole'] | 2025-02-04 | | | |
| | | AmodalTea | [] | osx.amodaltea | ['UNC1069'] | 2026-04-22 | | | |
| | | RTM | ['Redaman'] | win.rtm | [] | 2026-04-22 | | | |
| | | magecart | [] | js.magecart | ['FIN6', 'MageCart'] | 2026-03-30 | | | |
| | | GolangGhost | ['BitStep RAT', 'WeaselStore'] | win.golangghost | ['WageMole'] | 2026-03-27 | | | |
| | | tsh | ['TINYSHELL'] | elf.tsh | [] | 2026-03-27 | | | |
| | | BPFDoor | ['JustForFun'] | elf.bpfdoor | ['Red Menshen'] | 2026-03-27 | | | |
| | | Reynolds | [] | win.reynolds | [] | 2026-03-23 | | | |
| | | GreenBlood | [] | win.greenblood | [] | 2026-03-23 | | | |
| | | MoonRise | [] | win.moonrise | [] | 2026-03-23 | | | |
| | | TransferLoader | [] | win.transferloader | [] | 2026-03-12 | | | |
| | | CASTLELOADER | [] | win.castleloader | [] | 2026-03-12 | | | |
| | | KadNap | [] | elf.kadnap | [] | 2026-03-11 | | | |
| | | GolangGhost | [] | osx.golangghost | ['WageMole'] | 2026-03-11 | | | |
| | | Morpheus Loader | [] | win.morpheus_loader | [] | 2025-08-19 | | | |
| | | TrustConnect RAT | [] | win.trustconnect | [] | 2026-03-04 | | | |
| | | OceanLotus | [] | osx.oceanlotus | ['APT32'] | 2026-03-10 | | | |
| | | MacSpy | [] | osx.macspy | [] | 2026-03-10 | | | |
| | | Salvador Stealer | [] | apk.salvador | [] | 2026-03-10 | | | |
| | | BadPaw | [] | win.badpaw | ['APT28'] | 2026-03-04 | | | |
| | | IronZero | [] | win.ironzero | [] | 2026-03-03 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2026-03-03 | | | |
| | | GONEPOSTAL | ['Cordyceps', 'NOTDOOR'] | win.gonepostal | ['APT28'] | 2026-03-03 | | | |
| | | InsidiousGh0st | [] | osx.insidiousgh0st | ['Unfading Sea Haze'] | 2026-02-26 | | | |
| | | InsidiousGh0st | [] | elf.insidiousgh0st | ['Unfading Sea Haze'] | 2026-02-26 | | | |
| | | SUGARLOADER | [] | osx.sugarloader | ['Lazarus Group'] | 2026-02-27 | | | |
| | | GRIMBOLT | [] | elf.grimbolt | [] | 2026-02-27 | | | |
| | | SLAYSTYLE | [] | jar.slaystyle | [] | 2026-02-27 | | | |
| | | BRICKSTORM | [] | elf.brickstorm | ['UTA0178'] | 2026-02-27 | | | |
| | | Airstalk | [] | win.airstalk | ['CL-STA-1009'] | 2026-02-25 | | | |