| | | XTinyLoader | [] | win.xtinyloader | [] | 2025-09-09 | | | |
| | | RapperBot | [] | elf.rapper_bot | [] | 2025-09-09 | | | |
| | | Vidar | [] | win.vidar | [] | 2025-09-09 | | | |
| | | SalatStealer | [] | win.salatstealer | [] | 2025-08-28 | | | |
| | | Sindoor | [] | elf.sindoor | ['Operation C-Major'] | 2025-09-01 | | | |
| | | Hook | [] | apk.hook | [] | 2025-08-29 | | | |
| | | s1ngularity Stealer | [] | js.s1ngularity | [] | 2025-08-29 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2025-08-29 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-08-29 | | | |
| | | LimeRAT | [] | win.limerat | ['APT-C-36'] | 2025-08-29 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-08-29 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-08-29 | | | |
| | | PureCrypter | [] | win.purecrypter | [] | 2025-08-29 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-08-29 | | | |
| | | GolangGhost | [] | osx.golangghost | ['WageMole'] | 2025-08-29 | | | |
| | | Godfather | [] | apk.godfather | [] | 2025-08-29 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2025-08-28 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | ['Alpha Spider', 'RansomHub', 'Vanilla Tempest'] | 2025-08-28 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | elf.blackcat | ['Vanilla Tempest'] | 2025-08-28 | | | |
| | | MetaStealer | [] | win.metastealer | ['UNC5537'] | 2025-09-01 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2025-08-28 | | | |
| | | Akira Stealer | [] | py.akira_stealer | [] | 2025-08-28 | | | |
| | | PromptLock | [] | win.prompt_lock | [] | 2025-08-27 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2025-08-15 | | | |
| | | p0sT5n1F3r | [] | elf.p0st5n1f3r | [] | 2025-08-27 | | | |
| | | LunaSpy | ['Backdoor.916'] | apk.luna_spy | [] | 2025-08-26 | | | |
| | | STATICPLUGIN | [] | win.staticplugin | ['MUSTANG PANDA'] | 2025-08-26 | | | |
| | | Vshell | [] | win.vshell | [] | 2025-08-25 | | | |
| | | TgToxic | [] | apk.tgtoxic | [] | 2025-08-25 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2025-08-25 | | | |
| | | SilentPrism | [] | ps1.silent_prism | ['Larva-208'] | 2025-08-25 | | | |
| | | Fickle Stealer | [] | win.fickle | [] | 2025-08-25 | | | |
| | | XenArmor | ['XenArmor Suite'] | win.xenarmor | [] | 2023-05-10 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2025-08-25 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | Luna Grabber | [] | py.lunagrabber | [] | 2025-08-22 | | | |
| | | ApolloShadow | [] | win.apollo_shadow | ['Turla'] | 2025-08-22 | | | |
| | | QuirkyLoader | [] | win.quirkyloader | [] | 2025-08-22 | | | |
| | | Dridex | [] | win.dridex | ['Evil Corp', 'INDRIK SPIDER', 'TA505'] | 2024-04-15 | | | |
| | | SoundBill | [] | win.soundbill | [] | 2025-08-21 | | | |
| | | PicassoLoader | [] | win.picasso_loader | ['Ghostwriter'] | 2025-08-26 | | | |
| | | XenoRAT | [] | win.xenorat | [] | 2025-08-20 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-08-20 | | | |
| | | WarLock | [] | win.warlock | [] | 2025-08-20 | | | |
| | | HawkEye Keylogger | ['HawkEye', 'HawkEye Reborn', 'Predator Pain'] | win.hawkeye_keylogger | [] | 2025-08-20 | | | |
| | | VELETRIX | [] | win.veletrix | [] | 2025-08-19 | | | |
| | | AgendaCrypt | ['Agenda', 'Qilin'] | win.agendacrypt | [] | 2025-08-19 | | | |
| | | Qilin | [] | elf.qilin | [] | 2025-08-19 | | | |
| | | Morpheus Loader | [] | win.morpheus | [] | 2025-08-19 | | | |
| | | Aurotun Stealer | [] | win.aurotun_stealer | [] | 2025-08-18 | | | |
| | | PS1Bot | [] | php.ps1bot | [] | 2025-08-18 | | | |
| | | Nitrogen Ransomware | [] | win.nitrogen_ransomware | [] | 2025-08-18 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2025-08-18 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2025-08-18 | | | |
| | | PolarEdge | [] | elf.polaredge | [] | 2025-08-18 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-08-18 | | | |
| | | Plague | [] | elf.plague | [] | 2025-08-18 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2025-08-18 | | | |
| | | Cmimai Stealer | [] | win.cmimai | [] | 2025-08-18 | | | |
| | | magecart | [] | js.magecart | ['FIN6', 'MageCart'] | 2025-08-18 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-08-18 | | | |
| | | SmartLoader | [] | win.smartloader | [] | 2025-08-18 | | | |
| | | Raspberry Robin | ['RaspberryRobin', 'QNAP-Worm', 'LINK_MSIEXEC'] | win.raspberry_robin | [] | 2025-08-15 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2025-08-15 | | | |
| | | Parrot TDS | [] | js.parrot_tds | [] | 2025-08-15 | | | |
| | | Parrot TDS WebShell | [] | php.parrot_tds_shell | [] | 2025-08-15 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-08-15 | | | |
| | | Nova Stealer | ['Malicord'] | win.nova | [] | 2025-08-15 | | | |
| | | SafePay | [] | win.safepay | [] | 2025-08-15 | | | |
| | | BlankGrabber | [] | py.blankgrabber | [] | 2025-08-15 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2025-08-15 | | | |
| | | StrelaStealer | [] | win.strelastealer | [] | 2025-08-15 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2025-08-15 | | | |
| | | Volgmer | ['FALLCHILL', 'Manuscrypt'] | win.volgmer | ['Lazarus Group'] | 2025-07-29 | | | |
| | | RN Stealer | [] | py.rn_stealer | ['TraderTraitor'] | 2025-07-29 | | | |
| | | Manuscrypt | [] | osx.manuscrypt | ['Lazarus Group'] | 2025-07-29 | | | |
| | | Scavenger | ['scavenger', 'SCVNGR', 'scvngr'] | win.scavenger | [] | 2025-07-29 | | | |
| | | WEEVILPROXY | ['JSCEAL'] | js.weevilproxy | [] | 2025-08-15 | | | |
| | | CASTLELOADER | [] | win.castleloader | [] | 2025-07-28 | | | |
| | | Epsilon Red | ['BlackCocaine'] | win.epsilon_red | [] | 2025-07-28 | | | |
| | | OceanLotus | [] | osx.oceanlotus | ['APT32'] | 2025-07-28 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-07-28 | | | |
| | | Remo | ['PlayPraetor'] | apk.remo | [] | 2025-07-28 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2025-07-28 | | | |
| | | SpyMax | [] | apk.spymax | [] | 2025-07-28 | | | |
| | | BlackSuit | [] | win.blacksuit | [] | 2025-07-28 | | | |
| | | Chaos | ['FakeRyuk', 'RyukJoke', 'Yashma'] | win.chaos | [] | 2025-07-28 | | | |
| | | BlackSuit | [] | elf.blacksuit | [] | 2025-07-28 | | | |
| | | Royal Ransom | ['Royal_unix', 'Royal'] | elf.royal_ransom | [] | 2025-07-28 | | | |
| | | Mount Locker | ['DagonLocker', 'MountLocker', 'QuantumLocker'] | win.mount_locker | ['Vanilla Tempest'] | 2025-07-28 | | | |
| | | Royal Ransom | [] | win.royal_ransom | [] | 2025-07-28 | | | |
| | | Unidentified 123 (Go Infostealer) | ['Go Infostealer'] | win.unidentified_123 | [] | 2025-07-25 | | | |
| | | StarFish | [] | js.starfish | [] | 2025-07-25 | | | |
| | | KV | [] | sh.kv | ['Volt Typhoon'] | 2025-07-24 | | | |
| | | Pearl Stealer | [] | osx.pearl_stealer | [] | 2025-07-24 | | | |
| | | Dosia | ['DDOSIA'] | win.dosia | ['NoName057(16)'] | 2025-10-01 | | | |
| | | GootKit | ['Waldek', 'Xswkit', 'talalpek'] | win.gootkit | [] | 2025-07-24 | | | |
| | | Lyposit | ['Lucky Locker', 'Adneukine', 'Bomba Locker'] | win.lyposit | [] | 2025-07-24 | | | |
| | | Matsnu | [] | win.matsnu | [] | 2025-07-24 | | | |
| | | Reveton | [] | win.reveton | [] | 2025-07-24 | | | |