| | | LittleDaemon | [] | elf.little_daemon | ['PlushDaemon'] | 2025-11-21 | | | |
| | | EdgeStepper | [] | elf.edgestepper | ['PlushDaemon'] | 2025-11-21 | | | |
| | | tsunami | [] | win.tsunami | ['Lazarus Group'] | 2025-11-21 | | | |
| | | TsunamiKit | [] | win.tsunamikit | ['WageMole'] | 2025-11-21 | | | |
| | | Pureland | [] | osx.pureland | [] | 2025-11-19 | | | |
| | | KeySteal | [] | osx.keysteal | [] | 2025-11-19 | | | |
| | | EggShell RAT | [] | osx.eggshell_rat | [] | 2025-11-19 | | | |
| | | CloudMensis | ['BadRAT'] | osx.cloud_mensis | [] | 2025-11-19 | | | |
| | | Odyssey Stealer | [] | osx.odyssey_stealer | [] | 2025-11-19 | | | |
| | | Poseidon Stealer | ['Rodrigo Stealer'] | osx.poseidonstealer | [] | 2025-11-19 | | | |
| | | Warp Stealer | [] | win.warp_stealer | [] | 2025-11-19 | | | |
| | | RONINGLOADER | [] | win.roningloader | [] | 2025-11-18 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2025-03-10 | | | |
| | | GodRAT | [] | win.godrat | ['APT41'] | 2025-11-18 | | | |
| | | TAMECAT | [] | vbs.tamecat | ['APT42'] | 2025-11-14 | | | |
| | | SilentSweeper | [] | win.silent_sweeper | [] | 2025-11-13 | | | |
| | | Unidentified 093 (Sidewinder) | [] | win.unidentified_093 | ['RAZOR TIGER'] | 2025-11-13 | | | |
| | | RunForestRun | ['Blackhole', 'Sutra'] | js.runforestrun | [] | 2025-11-13 | | | |
| | | Unidentified PS 005 (Telegram Bot) | [] | ps1.unidentified_005 | ['YoroTrooper'] | 2025-11-13 | | | |
| | | LANDFALL | [] | apk.landfall | [] | 2025-11-09 | | | |
| | | Dante | [] | win.dante | [] | 2025-11-05 | | | |
| | | BQTlock | [] | elf.bqtlock | [] | 2025-11-05 | | | |
| | | PolarEdge | [] | elf.polaredge | [] | 2025-11-05 | | | |
| | | LinkPro | [] | elf.linkpro | [] | 2025-11-03 | | | |
| | | wAgentTea | ['wAgent'] | win.wagenttea | ['Lazarus Group'] | 2025-10-31 | | | |
| | | Kubo Injector | [] | elf.kubo_injector | [] | 2025-10-28 | | | |
| | | Princess | [] | apk.princess | [] | 2025-10-24 | | | |
| | | GlassWorm | [] | js.glassworm | [] | 2025-10-21 | | | |
| | | vGet | [] | elf.vget | [] | 2025-10-20 | | | |
| | | Bofamet | [] | win.bofamet | [] | 2025-10-21 | | | |
| | | ClipBanker | [] | win.clipbanker | [] | 2025-10-20 | | | |
| | | CHINACHOPPER | [] | win.chinachopper | ['APT41', 'EMISSARY PANDA', 'GALLIUM', 'HAFNIUM', 'Hurricane Panda', 'Leviathan'] | 2025-10-20 | | | |
| | | BellaCiao | [] | win.bellaciao | [] | 2025-10-15 | | | |
| | | Pantegana | [] | win.pantegana | [] | 2025-10-15 | | | |
| | | Leslieloader | [] | win.leslieloader | [] | 2025-10-15 | | | |
| | | SparkRAT | [] | win.spark_rat | [] | 2025-10-15 | | | |
| | | x4 | [] | win.x4 | [] | 2025-10-15 | | | |
| | | FlowCloud | [] | win.flowcloud | ['Stone Panda'] | 2025-10-15 | | | |
| | | Soul | ['SoulSearcher'] | win.soul | [] | 2025-10-15 | | | |
| | | SoulSearcher | [] | win.soulsearcher | ['SharpPanda'] | 2025-10-15 | | | |
| | | AllaKore | [] | win.allakore | [] | 2025-09-30 | | | |
| | | BaoLoader | [] | win.baoloader | [] | 2025-09-23 | | | |
| | | BTMOB RAT | [] | apk.btmob | [] | 2025-09-23 | | | |
| | | ContagiousDrop | [] | js.contagious_drop | [] | 2025-09-16 | | | |
| | | MostereRAT | [] | win.mostere_rat | [] | 2025-09-09 | | | |
| | | RatOn | [] | apk.rat_on | [] | 2025-09-09 | | | |
| | | Merlin | [] | win.merlin | [] | 2025-09-09 | | | |
| | | TimbreStealer | [] | win.timbre_stealer | [] | 2025-09-09 | | | |
| | | NightshadeC2 | [] | py.nightshade_c2 | [] | 2025-09-09 | | | |
| | | LAMEHUG | [] | py.lamehug | ['APT28'] | 2025-09-09 | | | |
| | | DEVMAN | [] | win.devman | ['DragonForce', '[Unnamed group]'] | 2025-09-09 | | | |
| | | Felixroot | [] | win.felixroot | ['GreyEnergy'] | 2025-09-09 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2025-09-09 | | | |
| | | RapperBot | [] | elf.rapper_bot | [] | 2025-09-09 | | | |
| | | Sindoor | [] | elf.sindoor | ['Operation C-Major'] | 2025-09-01 | | | |
| | | s1ngularity Stealer | [] | js.s1ngularity | [] | 2025-08-29 | | | |
| | | LimeRAT | [] | win.limerat | ['APT-C-36'] | 2025-08-29 | | | |
| | | PureCrypter | [] | win.purecrypter | [] | 2025-08-29 | | | |
| | | Godfather | [] | apk.godfather | [] | 2025-08-29 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2025-08-28 | | | |
| | | Akira Stealer | [] | py.akira_stealer | [] | 2025-08-28 | | | |
| | | p0sT5n1F3r | [] | elf.p0st5n1f3r | [] | 2025-08-27 | | | |
| | | LunaSpy | ['Backdoor.916'] | apk.luna_spy | [] | 2025-08-26 | | | |
| | | STATICPLUGIN | [] | win.staticplugin | ['MUSTANG PANDA'] | 2025-08-26 | | | |
| | | TgToxic | [] | apk.tgtoxic | [] | 2025-08-25 | | | |
| | | SilentPrism | [] | ps1.silent_prism | ['Larva-208'] | 2025-08-25 | | | |
| | | Luna Grabber | [] | py.lunagrabber | [] | 2025-08-22 | | | |
| | | HawkEye Keylogger | ['HawkEye', 'HawkEye Reborn', 'Predator Pain'] | win.hawkeye_keylogger | [] | 2025-08-20 | | | |
| | | PS1Bot | ['Bossnet'] | php.ps1bot | [] | 2026-06-08 | | | |
| | | Plague | [] | elf.plague | [] | 2025-08-18 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2025-08-18 | | | |
| | | Cmimai Stealer | [] | win.cmimai | [] | 2025-08-18 | | | |
| | | Parrot TDS WebShell | [] | php.parrot_tds_shell | [] | 2025-08-15 | | | |
| | | Parrot TDS | [] | js.parrot_tds | [] | 2025-08-15 | | | |
| | | Raspberry Robin | ['RaspberryRobin', 'QNAP-Worm', 'LINK_MSIEXEC'] | win.raspberry_robin | [] | 2025-08-15 | | | |
| | | Nova Stealer | ['Malicord'] | win.nova | [] | 2025-08-15 | | | |
| | | BlankGrabber | [] | py.blankgrabber | [] | 2025-08-15 | | | |
| | | Manuscrypt | [] | osx.manuscrypt | ['Lazarus Group'] | 2025-07-29 | | | |
| | | RN Stealer | [] | py.rn_stealer | ['TraderTraitor'] | 2025-07-29 | | | |
| | | WEEVILPROXY | ['JSCEAL'] | js.weevilproxy | [] | 2025-08-15 | | | |
| | | Remo | ['PlayPraetor'] | apk.remo | [] | 2025-07-28 | | | |
| | | SpyMax | [] | apk.spymax | [] | 2025-07-28 | | | |
| | | BlackSuit | [] | elf.blacksuit | [] | 2025-07-28 | | | |
| | | Royal Ransom | ['Royal_unix', 'Royal'] | elf.royal_ransom | [] | 2025-07-28 | | | |
| | | Unidentified 123 (Go Infostealer) | ['Go Infostealer'] | win.unidentified_123 | [] | 2025-07-25 | | | |
| | | StarFish | [] | js.starfish | [] | 2025-07-25 | | | |
| | | Pearl Stealer | [] | osx.pearl_stealer | [] | 2025-07-24 | | | |
| | | Dosia | ['DDOSIA'] | win.dosia | ['NoName057(16)'] | 2025-10-01 | | | |
| | | Reveton | [] | win.reveton | [] | 2025-07-24 | | | |
| | | SharPyShell | ['ASPSHELL'] | win.sharpyshell | ['APT41'] | 2025-07-22 | | | |
| | | ASPXSpy | [] | php.aspxspy | ['APT39', 'APT41', 'HAFNIUM'] | 2025-07-22 | | | |
| | | TwoFace | ['Minion', 'HighShell', 'HyperShell', 'SEASHARPEE'] | asp.twoface | ['APT27', 'APT34', 'OilRig', 'Turla', 'UNC215'] | 2025-07-22 | | | |
| | | ColdLock | [] | win.coldlock | ['APT41'] | 2025-07-21 | | | |
| | | Crocodilus | [] | apk.crocodilus | [] | 2025-07-21 | | | |
| | | FrostyFerret | [] | osx.frostyferret | ['WageMole'] | 2025-04-27 | | | |
| | | STRRAT | [] | jar.strrat | [] | 2025-07-17 | | | |
| | | Koi Stealer | [] | win.koistealer | [] | 2024-12-09 | | | |
| | | Mispadu | ['URSA'] | win.mispadu | [] | 2025-07-14 | | | |
| | | HATVIBE | [] | vbs.hatvibe | ['UAC-0063'] | 2025-07-11 | | | |
| | | iox | [] | win.iox | [] | 2025-07-08 | | | |