| | | Amatera | [] | win.amatera | [] | 2026-09-07 | | | |
| | | SmartApeSG | ['HANEYMANEY', 'ZPHP'] | js.smartapesg | [] | 2026-09-02 | | | |
| | | redshell | [] | elf.redshell | [] | 2026-09-01 | | | |
| | | Auto-Color | [] | elf.auto_color | [] | 2026-08-31 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2026-08-31 | | | |
| | | Babadeda | [] | win.babadeda | [] | 2026-08-24 | | | |
| | | HypeAgent | [] | win.hype_agent | [] | 2026-08-20 | | | |
| | | NeedleStealer | [] | win.needle_stealer | [] | 2026-08-20 | | | |
| | | JADESNOW | ['ChainedDown'] | js.jadesnow | ['WageMole'] | 2026-08-13 | | | |
| | | TELEPUZ | [] | win.telepuz | [] | 2026-08-13 | | | |
| | | MeowBackConn | [] | win.meowbackconn | [] | 2026-09-07 | | | |
| | | PureMiner | [] | win.pureminer | [] | 2026-09-07 | | | |
| | | 1337_GTWK | [] | elf.1337_gtwk_rootkit | [] | 2026-08-03 | | | |
| | | Chisel | [] | win.chisel | [] | 2026-07-31 | | | |
| | | TriangleDB | [] | ios.triangledb | [] | 2026-07-28 | | | |
| | | Venom RAT | [] | win.venom | [] | 2026-07-28 | | | |
| | | SpyPress | [] | js.spypress | ['APT28'] | 2026-07-24 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2026-07-24 | | | |
| | | MonsterV2 | ['Aurotun Stealer'] | win.monsterv2 | [] | 2026-07-22 | | | |
| | | fast16 | [] | win.fast16 | [] | 2026-07-22 | | | |
| | | KongTuke | ['TAG-124', 'js.LandUpdate808'] | js.kongtuke | [] | 2026-07-21 | | | |
| | | ModeloRAT | [] | py.modelorat | [] | 2026-07-21 | | | |
| | | MacSync | [] | osx.macsync | [] | 2026-07-21 | | | |
| | | TonRAT | ['TONResolver'] | js.tonrat | [] | 2026-07-20 | | | |
| | | IceCube | [] | js.icecube | [] | 2026-07-13 | | | |
| | | LONGLEASH | [] | elf.longleash | [] | 2026-07-13 | | | |
| | | JARLEASH | [] | jar.jarleash | [] | 2026-07-13 | | | |
| | | DOGLEASH | [] | elf.dogleash | [] | 2026-07-13 | | | |
| | | Shai-Hulud | [] | js.shai_hulud | [] | 2026-07-07 | | | |
| | | MINIRECON | [] | win.minirecon | ['MUSTANG PANDA'] | 2026-07-02 | | | |
| | | XehookStealer | [] | win.xehook | [] | 2026-07-01 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2026-07-01 | | | |
| | | BUSHWALK | [] | elf.bushwalk | [] | 2026-06-30 | | | |
| | | PITFUEL | [] | elf.pitfuel | [] | 2026-06-30 | | | |
| | | PITHOOK | [] | elf.pithook | [] | 2026-06-30 | | | |
| | | PITSOCK | [] | elf.pitsock | [] | 2026-06-30 | | | |
| | | SystemBC | [] | elf.systembc | [] | 2026-06-30 | | | |
| | | Showboat | [] | elf.showboat | [] | 2026-06-29 | | | |
| | | SprySOCKS | [] | win.sprysocks | ['Earth Lusca'] | 2026-06-25 | | | |
| | | Keenadu | [] | apk.keenadu | [] | 2026-06-25 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2026-06-24 | | | |
| | | PylangGhost | ['ICEBITE.PYTHON', 'WeaselStore'] | py.pylangghost | ['WageMole'] | 2026-06-24 | | | |
| | | elf.iocontrol | ['OrpraCab', 'QueueCat'] | elf.iocontrol | ['Cyber Av3ngers'] | 2025-06-11 | | | |
| | | SMOKEDHAM | [] | win.smokedham | [] | 2026-06-19 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2026-06-19 | | | |
| | | SoxAgent | [] | elf.soxagent | ['SLIME88'] | 2026-06-18 | | | |
| | | GammDrop | [] | vbs.gammadrop | ['Gamaredon Group'] | 2026-06-18 | | | |
| | | GammaLoad | [] | vbs.gammaload | ['Gamaredon Group'] | 2026-06-18 | | | |
| | | SilentRunLoader | [] | win.silent_run_loader | ['TA4922'] | 2026-06-18 | | | |
| | | RomulusLoader | [] | win.romulus_loader | ['TA4922'] | 2026-06-18 | | | |
| | | BACKORDER | [] | win.backorder | ['Sandworm'] | 2026-06-18 | | | |
| | | WAVESHAPER | ['osx.curlyveiltea'] | osx.waveshaper | ['UNC1069'] | 2026-06-18 | | | |
| | | LegionRelay | [] | ps1.legion_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | PhantomRelay | [] | ps1.phantom_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | Banana RAT | [] | ps1.banana_rat | ['SHADOW-WATER-063'] | 2026-06-09 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2026-06-09 | | | |
| | | SILENTLOOP | [] | ps1.silentloop | [] | 2026-06-09 | | | |
| | | AGINGFLY | [] | win.agingfly | [] | 2026-06-09 | | | |
| | | C0XMO | [] | elf.c0xmo | [] | 2026-06-08 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2026-05-27 | | | |
| | | SUNBURST | ['Solorigate'] | win.sunburst | ['APT 29', 'UNC2452'] | 2026-06-02 | | | |
| | | TEARDROP | [] | win.teardrop | ['UNC2452'] | 2026-06-02 | | | |
| | | Calfbot | [] | sh.calfbot | ['[Unnamed group]'] | 2026-06-02 | | | |
| | | GRUNT | ['Covenant'] | win.grunt | [] | 2026-06-02 | | | |
| | | POOLRAT | ['SIMPLESEA', 'SIMPLETEA'] | osx.poolrat | ['Lazarus Group'] | 2026-06-02 | | | |
| | | SimpleTea | ['PondRAT', 'SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2026-06-02 | | | |
| | | Mirax | ['Astrinox', 'Mirax Bot', 'MiraxRAT'] | apk.mirax | [] | 2026-05-27 | | | |
| | | RemoteX | [] | win.remotex | [] | 2026-05-22 | | | |
| | | PXA Stealer | ['PXAStealer', 'PXA'] | py.pxa_stealer | ['CoralRaider'] | 2026-05-21 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2026-05-21 | | | |
| | | Slopoly | [] | ps1.slopoly | ['Hive0163'] | 2026-05-20 | | | |
| | | TCLBANKER | [] | win.tclbanker | [] | 2026-05-20 | | | |
| | | PicassoLoader | [] | win.picasso_loader | ['Ghostwriter'] | 2026-05-19 | | | |
| | | Payload | [] | elf.payload | [] | 2026-05-19 | | | |
| | | Zedhou | [] | win.zedhou | [] | 2018-07-24 | | | |
| | | Xloader | ['Formbook'] | osx.xloader | [] | 2026-05-18 | | | |
| | | TrickMo | [] | apk.trickmo | [] | 2026-05-18 | | | |
| | | ZionSiphon | [] | win.zionsiphon | [] | 2026-05-18 | | | |
| | | PeerTime | [] | elf.peer_time | ['UAT-9244'] | 2026-05-11 | | | |
| | | Eternidade Stealer | [] | win.eternidade_stealer | [] | 2026-05-13 | | | |
| | | TernDoor | [] | win.terndoor | ['UAT-9244'] | 2026-05-11 | | | |
| | | BruteEntry | [] | elf.brute_entry | ['UAT-9244'] | 2026-05-11 | | | |
| | | GRIDTIDE | [] | elf.gridtide | ['UNC2814'] | 2026-05-11 | | | |
| | | Tsundere | ['DinDoor'] | js.tsundere | ['MuddyWater'] | 2026-05-08 | | | |
| | | MicroStealer | [] | jar.microstealer | [] | 2026-05-08 | | | |
| | | LucidRook | [] | win.lucidrook | [] | 2026-05-08 | | | |
| | | LucidKnight | [] | win.lucidknight | [] | 2026-05-08 | | | |
| | | SpyFRPTunnel | ['fvncBot'] | apk.spyfrptunnel | [] | 2026-05-08 | | | |
| | | SafePay | [] | win.safepay | [] | 2026-05-08 | | | |
| | | Babuk | [] | elf.babuk | [] | 2026-05-08 | | | |
| | | DracuLoader | [] | win.dracu_loader | ['Earth Estries'] | 2026-05-08 | | | |
| | | Phantom Stealer | [] | win.phantom_stealer | [] | 2026-05-08 | | | |
| | | ProSpy | [] | apk.prospy | ['HAZY TIGER'] | 2026-05-06 | | | |
| | | VoltStealer | [] | win.voltstealer | [] | 2026-05-06 | | | |
| | | HanGhost | [] | win.hanghost | [] | 2026-05-06 | | | |
| | | AGEWHEEZE | [] | win.agewheeze | ['Cyber Serp'] | 2026-05-06 | | | |
| | | ABCDoor | [] | win.abcdoor | [] | 2026-05-06 | | | |
| | | QLNX | ['Quasar Linux RAT'] | elf.qlnx | [] | 2026-05-05 | | | |
| | | Macaw | [] | win.macaw | [] | 2026-05-05 | | | |
| | | SNOWBASIN | [] | py.snowbasin | ['UNC6692'] | 2026-05-05 | | | |