| | | ContagiousDrop | [] | js.contagious_drop | [] | 2025-09-16 | | | |
| | | SimpleTea | ['PondRAT', 'SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2025-09-15 | | | |
| | | MostereRAT | [] | win.mostere_rat | [] | 2025-09-09 | | | |
| | | RatOn | [] | apk.rat_on | [] | 2025-09-09 | | | |
| | | Merlin | [] | win.merlin | [] | 2025-09-09 | | | |
| | | TimbreStealer | [] | win.timbre_stealer | [] | 2025-09-09 | | | |
| | | NightshadeC2 | [] | py.nightshade_c2 | [] | 2025-09-09 | | | |
| | | LAMEHUG | [] | py.lamehug | ['APT28'] | 2025-09-09 | | | |
| | | DEVMAN | [] | win.devman | ['DragonForce', '[Unnamed group]'] | 2025-09-09 | | | |
| | | Felixroot | [] | win.felixroot | ['GreyEnergy'] | 2025-09-09 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2025-09-09 | | | |
| | | RapperBot | [] | elf.rapper_bot | [] | 2025-09-09 | | | |
| | | Sindoor | [] | elf.sindoor | ['Operation C-Major'] | 2025-09-01 | | | |
| | | s1ngularity Stealer | [] | js.s1ngularity | [] | 2025-08-29 | | | |
| | | PureCrypter | [] | win.purecrypter | [] | 2025-08-29 | | | |
| | | LimeRAT | [] | win.limerat | ['APT-C-36'] | 2025-08-29 | | | |
| | | Godfather | [] | apk.godfather | [] | 2025-08-29 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2025-08-28 | | | |
| | | Akira Stealer | [] | py.akira_stealer | [] | 2025-08-28 | | | |
| | | p0sT5n1F3r | [] | elf.p0st5n1f3r | [] | 2025-08-27 | | | |
| | | LunaSpy | ['Backdoor.916'] | apk.luna_spy | [] | 2025-08-26 | | | |
| | | STATICPLUGIN | [] | win.staticplugin | ['MUSTANG PANDA'] | 2025-08-26 | | | |
| | | TgToxic | [] | apk.tgtoxic | [] | 2025-08-25 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2025-08-25 | | | |
| | | SilentPrism | [] | ps1.silent_prism | ['Larva-208'] | 2025-08-25 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2025-08-25 | | | |
| | | Luna Grabber | [] | py.lunagrabber | [] | 2025-08-22 | | | |
| | | XenoRAT | [] | win.xenorat | [] | 2026-02-24 | | | |
| | | HawkEye Keylogger | ['HawkEye', 'HawkEye Reborn', 'Predator Pain'] | win.hawkeye_keylogger | [] | 2025-08-20 | | | |
| | | PS1Bot | [] | php.ps1bot | [] | 2025-08-18 | | | |
| | | Plague | [] | elf.plague | [] | 2025-08-18 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2025-08-18 | | | |
| | | Cmimai Stealer | [] | win.cmimai | [] | 2025-08-18 | | | |
| | | Parrot TDS WebShell | [] | php.parrot_tds_shell | [] | 2025-08-15 | | | |
| | | Parrot TDS | [] | js.parrot_tds | [] | 2025-08-15 | | | |
| | | Raspberry Robin | ['RaspberryRobin', 'QNAP-Worm', 'LINK_MSIEXEC'] | win.raspberry_robin | [] | 2025-08-15 | | | |
| | | Nova Stealer | ['Malicord'] | win.nova | [] | 2025-08-15 | | | |
| | | BlankGrabber | [] | py.blankgrabber | [] | 2025-08-15 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2025-08-15 | | | |
| | | Manuscrypt | [] | osx.manuscrypt | ['Lazarus Group'] | 2025-07-29 | | | |
| | | RN Stealer | [] | py.rn_stealer | ['TraderTraitor'] | 2025-07-29 | | | |
| | | WEEVILPROXY | ['JSCEAL'] | js.weevilproxy | [] | 2025-08-15 | | | |
| | | Remo | ['PlayPraetor'] | apk.remo | [] | 2025-07-28 | | | |
| | | SpyMax | [] | apk.spymax | [] | 2025-07-28 | | | |
| | | BlackSuit | [] | elf.blacksuit | [] | 2025-07-28 | | | |
| | | Royal Ransom | ['Royal_unix', 'Royal'] | elf.royal_ransom | [] | 2025-07-28 | | | |
| | | Unidentified 123 (Go Infostealer) | ['Go Infostealer'] | win.unidentified_123 | [] | 2025-07-25 | | | |
| | | StarFish | [] | js.starfish | [] | 2025-07-25 | | | |
| | | KV | [] | sh.kv | ['Volt Typhoon'] | 2025-07-24 | | | |
| | | Pearl Stealer | [] | osx.pearl_stealer | [] | 2025-07-24 | | | |
| | | Dosia | ['DDOSIA'] | win.dosia | ['NoName057(16)'] | 2025-10-01 | | | |
| | | Reveton | [] | win.reveton | [] | 2025-07-24 | | | |
| | | SharPyShell | ['ASPSHELL'] | win.sharpyshell | ['APT41'] | 2025-07-22 | | | |
| | | ASPXSpy | [] | php.aspxspy | ['APT39', 'APT41', 'HAFNIUM'] | 2025-07-22 | | | |
| | | TwoFace | ['Minion', 'HighShell', 'HyperShell', 'SEASHARPEE'] | asp.twoface | ['APT27', 'APT34', 'OilRig', 'Turla', 'UNC215'] | 2025-07-22 | | | |
| | | ColdLock | [] | win.coldlock | ['APT41'] | 2025-07-21 | | | |
| | | Crocodilus | [] | apk.crocodilus | [] | 2025-07-21 | | | |
| | | FrostyFerret | [] | osx.frostyferret | ['WageMole'] | 2025-04-27 | | | |
| | | STRRAT | [] | jar.strrat | [] | 2025-07-17 | | | |
| | | Koi Stealer | [] | win.koistealer | [] | 2024-12-09 | | | |
| | | Mispadu | ['URSA'] | win.mispadu | [] | 2025-07-14 | | | |
| | | HATVIBE | [] | vbs.hatvibe | ['UAC-0063'] | 2025-07-11 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2025-07-08 | | | |
| | | iox | [] | win.iox | [] | 2025-07-08 | | | |
| | | PowerNet | [] | ps1.powernet | ['FIN7'] | 2025-07-07 | | | |
| | | JanelaRAT | [] | win.janela_rat | [] | 2025-07-07 | | | |
| | | GOREVERSE | [] | elf.goreverse | ['UNC5174'] | 2025-07-07 | | | |
| | | JenX | [] | elf.jenx | [] | 2025-07-02 | | | |
| | | SideWalk | [] | elf.sidewalk | [] | 2025-07-02 | | | |
| | | GOREshell | [] | elf.goreshell | [] | 2025-07-02 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-07-01 | | | |
| | | HexaLocker | [] | win.hexalocker | [] | 2025-06-30 | | | |
| | | Skuld | ['TMPN'] | win.skuld | [] | 2025-06-30 | | | |
| | | ShortLeash | [] | elf.shortleash | [] | 2025-06-24 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2025-06-24 | | | |
| | | Flodrix | [] | elf.flodrix | [] | 2025-06-23 | | | |
| | | Sorillus RAT | [] | jar.sorillus | [] | 2025-06-23 | | | |
| | | DollyWay | [] | php.dollyway | [] | 2025-08-18 | | | |
| | | HyperSSL | ['SysUpdate'] | elf.hyperssl | ['APT27'] | 2025-06-20 | | | |
| | | QuietSieve | [] | win.quietsieve | ['Gamaredon Group'] | 2025-06-20 | | | |
| | | Anubis | ['BankBot', 'android.bankbot', 'android.bankspy'] | apk.anubis | [] | 2025-06-20 | | | |
| | | CraxsRAT | [] | apk.craxs_rat | [] | 2025-06-20 | | | |
| | | Dendroid | [] | apk.dendroid | [] | 2025-06-20 | | | |
| | | FakeGram | ['FakeTGram'] | apk.faketgram | [] | 2025-06-20 | | | |
| | | Hydra | [] | apk.hydra | [] | 2025-06-20 | | | |
| | | IPStorm | ['InterPlanetary Storm'] | apk.ipstorm | [] | 2025-06-20 | | | |
| | | Antidot | [] | apk.antidot | [] | 2025-06-20 | | | |
| | | EugenLoader | ['FakeBat', 'NUMOZYLOD', 'PaykLoader'] | ps1.eugenloader | ['APOTHECARY SPIDER', 'Storm-1113'] | 2025-06-17 | | | |
| | | POWERTRASH | [] | ps1.powertrash | ['FIN7'] | 2025-06-17 | | | |
| | | Veaty | ['Whisper'] | win.veaty | [] | 2025-06-16 | | | |
| | | Spereal | [] | win.spearal | [] | 2025-06-16 | | | |
| | | INCONTROLLER | ['PIPEDREAM'] | win.incontroller | [] | 2025-06-13 | | | |
| | | Nimbo-C2 | [] | elf.nimbo_c2 | [] | 2025-06-13 | | | |
| | | FaceStealer | [] | apk.facestealer | [] | 2025-06-13 | | | |
| | | TrickMo | [] | apk.trickmo | [] | 2025-06-11 | | | |
| | | FlowerPower | ['BoBoStealer'] | ps1.flowerpower | ['Kimsuky'] | 2025-06-11 | | | |
| | | elf.iocontrol | ['OrpraCab', 'QueueCat'] | elf.iocontrol | ['Cyber Av3ngers'] | 2025-06-11 | | | |
| | | BDarkRAT | [] | win.bdark_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | AlmondRAT | [] | win.almond_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | FTCODE | [] | ps1.ftcode | [] | 2025-06-05 | | | |