| | | Warsaw | [] | win.warsaw | [] | 2026-10-28 | | | |
| | | bancos | [] | win.bancos | [] | 2026-10-28 | | | |
| | | Ousaban | [] | win.ousaban | [] | 2026-10-28 | | | |
| | | reptile | [] | elf.reptile | [] | 2026-10-28 | | | |
| | | AgfSpy | [] | win.agfspy | [] | 2026-10-28 | | | |
| | | SLUB | [] | win.slub | [] | 2026-10-28 | | | |
| | | DneSpy | [] | win.dnespy | [] | 2026-10-28 | | | |
| | | MISTCLOAK | ['HIUPAN'] | win.mistcloak | [] | 2026-10-28 | | | |
| | | DARKDEW | [] | win.darkdew | [] | 2026-10-28 | | | |
| | | BLUEHAZE | [] | win.bluehaze | [] | 2026-10-28 | | | |
| | | Pantegana | [] | win.pantegana | [] | 2026-10-28 | | | |
| | | INCONTROLLER | ['PIPEDREAM'] | win.incontroller | [] | 2026-10-28 | | | |
| | | Loki Password Stealer (PWS) | ['Burkina', 'Loki', 'LokiBot', 'LokiPWS'] | win.lokipws | ['SWEED', 'The Gorgon Group', 'Cobalt'] | 2026-10-28 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-10-28 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2026-10-28 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2026-10-28 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2026-10-28 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2026-10-28 | | | |
| | | CloudSyncD | [] | osx.cloudsyncd | ['REF8801'] | 2026-10-28 | | | |
| | | INC | [] | elf.inc | ['Storm-0494', 'Vanilla Tempest'] | 2026-10-28 | | | |
| | | INC | [] | win.inc | [] | 2026-10-28 | | | |
| | | PureLogs Stealer | ['zgRAT'] | win.purelogs | [] | 2026-10-28 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2026-10-28 | | | |
| | | UACMe | ['Akagi'] | win.uacme | [] | 2026-10-28 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2026-10-28 | | | |
| | | ICMacOS | [] | osx.icmacos | [] | 2026-10-28 | | | |
| | | Alfonso Stealer | [] | win.alfonso_stealer | [] | 2026-10-28 | | | |
| | | Bandit Stealer | [] | win.bandit | [] | 2026-10-28 | | | |
| | | Cameleon | ['StormKitty'] | win.cameleon | [] | 2026-10-28 | | | |
| | | Vidar | [] | win.vidar | [] | 2026-10-28 | | | |
| | | Stealc | [] | win.stealc | [] | 2026-10-28 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2026-10-28 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2026-10-28 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2026-10-28 | | | |
| | | Fabookie | [] | win.fabookie | [] | 2026-10-28 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2026-10-28 | | | |
| | | Nanocore RAT | ['Nancrat', 'NanoCore'] | win.nanocore | ['APT33', 'The Gorgon Group'] | 2026-10-28 | | | |
| | | Panda Stealer | [] | win.panda_stealer | [] | 2026-10-28 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2026-10-28 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2026-10-28 | | | |
| | | OSAMiner | [] | osx.osaminer | [] | 2026-10-26 | | | |
| | | XCSSET | [] | osx.xcsset | [] | 2026-10-26 | | | |
| | | Amadey | [] | win.amadey | [] | 2026-10-24 | | | |
| | | ArcaneStealer | [] | win.arcane_stealer | [] | 2026-10-24 | | | |
| | | KarstoRAT | [] | win.karsto_rat | [] | 2026-10-24 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2026-10-24 | | | |
| | | GCleaner | [] | win.gcleaner | [] | 2026-10-24 | | | |
| | | Atlas RAT | [] | win.atlas_rat | ['TA4922'] | 2026-10-24 | | | |
| | | PixyNetLoader | [] | win.pixynet_loader | ['APT28'] | 2026-10-24 | | | |
| | | Zalmoxis | [] | win.zalmoxis | [] | 2026-10-24 | | | |
| | | SloppyRAT | ['ZINCHILL', 'PSHaunt'] | win.sloppyrat | [] | 2026-10-24 | | | |
| | | DarkVision RAT | [] | win.darkvision_rat | [] | 2026-10-24 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2026-10-24 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2026-10-24 | | | |
| | | GRAYRABBIT | [] | win.grayrabbit | ['UNC3569'] | 2026-10-24 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2026-10-24 | | | |
| | | SiestaGraph | ['DRAFTGRAPH'] | win.siesta_graph | [] | 2026-10-24 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2026-10-24 | | | |
| | | ZXShell | ['Sensocode'] | win.zxshell | ['APT41', 'EMISSARY PANDA', 'Leviathan'] | 2026-10-24 | | | |
| | | Guerrilla | [] | apk.guerrilla | [] | 2026-10-24 | | | |
| | | Triada | [] | apk.triada | [] | 2026-10-24 | | | |
| | | Remo | ['PlayPraetor'] | apk.remo | [] | 2026-10-24 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2026-10-24 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2026-10-24 | | | |
| | | PeckBirdy | [] | js.peckbirdy | [] | 2026-10-24 | | | |
| | | DollyWay | [] | php.dollyway | [] | 2026-10-24 | | | |
| | | ChocoShell | [] | ps1.choco_shell | ['APT29'] | 2026-10-24 | | | |
| | | CornFlake | [] | win.cornflake | ['APT29'] | 2026-10-24 | | | |
| | | MopsStealer | [] | win.mops_stealer | [] | 2026-10-24 | | | |
| | | StoatWaffle | [] | js.stoatwaffle | ['WageMole'] | 2026-10-28 | | | |
| | | Aura Stealer | ['AURA Stealer', 'AURASTEAL'] | win.aurastealer | [] | 2026-05-19 | | | |
| | | Horse Shell | [] | elf.horseshell | [] | 2026-10-15 | | | |
| | | ROMCOM RAT | ['PEAPOD', 'SingleCamper', 'SnipBot'] | win.romcom_rat | [] | 2026-10-15 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | ['Vanilla Tempest'] | 2026-10-15 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | ['Alpha Spider', 'RansomHub', 'Vanilla Tempest'] | 2026-10-15 | | | |
| | | Meduza Stealer | [] | win.meduza | [] | 2026-10-15 | | | |
| | | Mamba | ['HDDCryptor', 'DiskCryptor'] | win.mamba | [] | 2026-10-15 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2026-10-15 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT17', 'APT23', 'APT41', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA', 'Webworm'] | 2026-10-15 | | | |
| | | Dridex | [] | win.dridex | ['Evil Corp', 'INDRIK SPIDER', 'TA505'] | 2026-10-15 | | | |
| | | WARDENStealer | [] | win.warden_stealer | [] | 2026-10-15 | | | |
| | | ExplosiveRAT | [] | win.explosive_rat | [] | 2026-10-15 | | | |
| | | Lorem Ipsum | ['AxolotlLoader', 'OAKGLINT'] | win.lorem_ipsum | [] | 2026-10-07 | | | |
| | | CLOUDHAZE | ['zenith'] | win.cloudhaze | [] | 2026-10-15 | | | |
| | | PHANTOMPULL | [] | win.phantompull | [] | 2026-10-12 | | | |
| | | PHANTOMPULSE | [] | win.phantompulse | [] | 2026-10-12 | | | |
| | | Hancitor | ['Chanitor'] | win.hancitor | [] | 2026-10-12 | | | |
| | | KimJongRat | [] | win.kimjongrat | [] | 2026-10-12 | | | |
| | | TinyNuke | ['NukeBot', 'Nuclear Bot', 'MicroBankingTrojan', 'Xbot'] | win.tinynuke | [] | 2026-10-12 | | | |
| | | 8.t Dropper | ['8t_dropper', 'RoyalRoad'] | win.8t_dropper | ['Hellsing', 'Ice Fog', 'Pirate Panda', 'RANCOR', 'TA428', 'Tick', 'Tonto Team', 'Karma Panda'] | 2026-10-12 | | | |
| | | SparroWocky | [] | win.sparrowocky | [] | 2026-10-12 | | | |
| | | NeedyMantis | [] | win.needymantis | [] | 2026-10-12 | | | |
| | | Coruna | [] | ios.coruna | [] | 2026-10-12 | | | |
| | | GHOSTBLADE | [] | js.ghostblade | ['UNC6353'] | 2026-10-12 | | | |
| | | OtterCandy | ['HardHatRAT', 'UNSEENMINK'] | js.ottercandy | ['WageMole'] | 2026-07-17 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2026-10-09 | | | |
| | | YESROBOT | [] | win.yesrobot | ['Callisto'] | 2026-10-09 | | | |
| | | NOROBOT | ['BAITSWITCH'] | win.norobot | ['Callisto'] | 2026-10-09 | | | |
| | | Evilginx | [] | elf.evilginx | [] | 2026-10-09 | | | |