| | | PureLogs Stealer | [] | win.purelogs | [] | 2026-07-28 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2026-07-28 | | | |
| | | zgRAT | [] | win.zgrat | [] | 2026-07-28 | | | |
| | | Venom RAT | [] | win.venom | [] | 2026-07-28 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2026-07-28 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2026-07-28 | | | |
| | | Jackskid | ['RCtea'] | elf.jackskid | [] | 2026-07-27 | | | |
| | | VoidStealer | [] | win.voidstealer | [] | 2026-07-27 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2026-07-27 | | | |
| | | SpyPress | [] | js.spypress | ['APT28'] | 2026-07-24 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2026-07-24 | | | |
| | | Hopeless | [] | win.hopeless | [] | 2026-07-22 | | | |
| | | TriBack Loader | [] | win.triback_loader | [] | 2026-07-24 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2026-07-24 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2026-07-24 | | | |
| | | MonsterV2 | ['Aurotun Stealer'] | win.monsterv2 | [] | 2026-07-22 | | | |
| | | TONESHELL | [] | win.toneshell | ['MUSTANG PANDA'] | 2026-07-22 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2026-07-22 | | | |
| | | fast16 | [] | win.fast16 | [] | 2026-07-22 | | | |
| | | Ousaban | [] | win.ousaban | [] | 2026-07-13 | | | |
| | | KongTuke | ['TAG-124', 'js.LandUpdate808'] | js.kongtuke | [] | 2026-07-21 | | | |
| | | ModeloRAT | [] | py.modelorat | [] | 2026-07-21 | | | |
| | | MacSync | [] | osx.macsync | [] | 2026-07-21 | | | |
| | | TonRAT | ['TONResolver'] | js.tonrat | [] | 2026-07-20 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2026-07-16 | | | |
| | | Daxin | ['DELIMEAT'] | win.daxin | [] | 2026-07-16 | | | |
| | | IceCube | [] | js.icecube | [] | 2026-07-13 | | | |
| | | LONGLEASH | [] | elf.longleash | [] | 2026-07-13 | | | |
| | | JARLEASH | [] | jar.jarleash | [] | 2026-07-13 | | | |
| | | DOGLEASH | [] | elf.dogleash | [] | 2026-07-13 | | | |
| | | Shai-Hulud | [] | js.shai_hulud | [] | 2026-07-07 | | | |
| | | MINIRECON | [] | win.minirecon | ['MUSTANG PANDA'] | 2026-07-02 | | | |
| | | ZOHOMURK | [] | win.zohomurk | ['MUSTANG PANDA'] | 2026-07-01 | | | |
| | | XehookStealer | [] | win.xehook | [] | 2026-07-01 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2026-07-01 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2026-07-01 | | | |
| | | Reshell | [] | win.reshell | ['GALLIUM'] | 2026-07-01 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2026-07-01 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2026-07-01 | | | |
| | | 8Base | [] | win.8base | [] | 2026-07-01 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2026-07-01 | | | |
| | | GOREVERSE | [] | elf.goreverse | ['UNC5174'] | 2026-07-01 | | | |
| | | Sliver | [] | win.sliver | [] | 2026-07-01 | | | |
| | | Amadey | [] | win.amadey | [] | 2026-07-01 | | | |
| | | BUSHWALK | [] | elf.bushwalk | [] | 2026-06-30 | | | |
| | | PITFUEL | [] | elf.pitfuel | [] | 2026-06-30 | | | |
| | | PITHOOK | [] | elf.pithook | [] | 2026-06-30 | | | |
| | | PITSOCK | [] | elf.pitsock | [] | 2026-06-30 | | | |
| | | SystemBC | [] | elf.systembc | [] | 2026-06-30 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2026-06-30 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | ['Vanilla Tempest'] | 2026-06-30 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2026-06-30 | | | |
| | | Socks5Systemz | ['ProxyBox'] | win.socks5_systemz | [] | 2026-06-29 | | | |
| | | Showboat | [] | elf.showboat | [] | 2026-06-29 | | | |
| | | Unidentified 125 (RAT, Dropping Elephant) | [] | win.unidentified_125 | ['QUILTED TIGER'] | 2026-06-25 | | | |
| | | SprySOCKS | [] | win.sprysocks | ['Earth Lusca'] | 2026-06-25 | | | |
| | | MLTBackdoor | [] | win.mltbackdoor | [] | 2026-06-25 | | | |
| | | Gaslight | [] | osx.gaslight | [] | 2026-06-25 | | | |
| | | Keenadu | [] | apk.keenadu | [] | 2026-06-25 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2026-06-25 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2026-06-24 | | | |
| | | PylangGhost | ['ICEBITE.PYTHON', 'WeaselStore'] | py.pylangghost | ['WageMole'] | 2026-06-24 | | | |
| | | SolarisLoader | [] | win.solaris_loader | [] | 2026-06-24 | | | |
| | | oxloader | [] | win.oxloader | [] | 2026-06-23 | | | |
| | | MASOL | [] | win.masol | [] | 2026-06-23 | | | |
| | | GraphicalNeutrino | ['SNOWYAMBER'] | win.graphical_neutrino | ['APT29'] | 2023-07-28 | | | |
| | | elf.iocontrol | ['OrpraCab', 'QueueCat'] | elf.iocontrol | ['Cyber Av3ngers'] | 2025-06-11 | | | |
| | | SMOKEDHAM | [] | win.smokedham | [] | 2026-06-19 | | | |
| | | Hunters International | [] | win.hunters_international | ['Storm-0501'] | 2026-06-19 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2026-06-19 | | | |
| | | SoxAgent | [] | elf.soxagent | ['SLIME88'] | 2026-06-18 | | | |
| | | GammDrop | [] | vbs.gammadrop | ['Gamaredon Group'] | 2026-06-18 | | | |
| | | GammaLoad | [] | vbs.gammaload | ['Gamaredon Group'] | 2026-06-18 | | | |
| | | Atlas RAT | [] | win.atlas_rat | ['TA4922'] | 2026-06-18 | | | |
| | | BlackSuit | [] | win.blacksuit | [] | 2026-06-18 | | | |
| | | SilentRunLoader | [] | win.silent_run_loader | ['TA4922'] | 2026-06-18 | | | |
| | | RomulusLoader | [] | win.romulus_loader | ['TA4922'] | 2026-06-18 | | | |
| | | Sisron | [] | win.sisron | [] | 2026-06-18 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2026-06-18 | | | |
| | | ScoringMathTea | [] | win.scoring_math_tea | ['Lazarus Group'] | 2026-06-18 | | | |
| | | ImprudentCook | [] | win.imprudentcook | ['Lazarus Group'] | 2026-06-18 | | | |
| | | BACKORDER | [] | win.backorder | ['Sandworm'] | 2026-06-18 | | | |
| | | BirdCall | [] | win.birdcall | ['APT37'] | 2026-06-18 | | | |
| | | BLINDINGCAN | ['AIRDRY', 'ZetaNile'] | win.blindingcan | ['Lazarus Group'] | 2026-06-18 | | | |
| | | WAVESHAPER | ['osx.curlyveiltea'] | osx.waveshaper | ['UNC1069'] | 2026-06-18 | | | |
| | | Rook | [] | win.rook | [] | 2026-06-18 | | | |
| | | Tiger RAT | [] | win.tiger_rat | ['Silent Chollima'] | 2026-06-18 | | | |
| | | EDR-Freeze | [] | win.edr_freeze | [] | 2026-06-10 | | | |
| | | defendnot | [] | win.defendnot | [] | 2026-06-10 | | | |
| | | StilachiRAT | [] | win.stilachi_rat | [] | 2026-06-10 | | | |
| | | LegionRelay | [] | ps1.legion_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | PhantomRelay | [] | ps1.phantom_relay | ['GreyVibe'] | 2026-06-09 | | | |
| | | Banana RAT | [] | ps1.banana_rat | ['SHADOW-WATER-063'] | 2026-06-09 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2026-06-09 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2026-06-09 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2026-06-09 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2026-06-09 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-06-09 | | | |
| | | PixyNetLoader | [] | win.pixynet_loader | ['APT28'] | 2026-06-10 | | | |
| | | LOTUSLITE | [] | win.lotuslite | ['MUSTANG PANDA'] | 2026-06-09 | | | |