| | | NonEuclid RAT | ['LiberiumRAT', 'ShadowRoot', 'SheetRAT'] | win.noneuclid_rat | [] | 2026-02-24 | | | |
| | | RatonRAT | [] | win.raton_rat | [] | 2026-02-24 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2026-02-24 | | | |
| | | Astaroth | ['Guildma'] | win.astaroth | [] | 2026-02-17 | | | |
| | | Kimwolf | [] | apk.kimwolf | [] | 2026-02-17 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2026-02-17 | | | |
| | | Razr ransomware | [] | win.razr | [] | 2026-02-15 | | | |
| | | NodeCordRAT | [] | js.nodecordrat | [] | 2026-02-17 | | | |
| | | OctoRAT | [] | win.octorat | [] | 2026-02-05 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2026-02-05 | | | |
| | | Chrysalis | [] | win.chrysalis | ['LOTUS PANDA'] | 2026-02-03 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2026-02-03 | | | |
| | | TelePowerBot | [] | win.telepowerbot | [] | 2026-02-03 | | | |
| | | Lynx | [] | win.lynx | [] | 2026-02-03 | | | |
| | | PromptLock | [] | win.prompt_lock | [] | 2026-02-03 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2026-02-03 | | | |
| | | MASS Logger | [] | win.masslogger | [] | 2026-02-03 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2026-02-03 | | | |
| | | Xillen Stealer | [] | win.xillen_stealer | [] | 2026-01-31 | | | |
| | | LazyWiper | [] | ps1.lazywiper | [] | 2026-01-30 | | | |
| | | Interlock | [] | win.interlock | [] | 2026-01-30 | | | |
| | | SloppyMIO | [] | win.sloppy_mio | [] | 2026-01-29 | | | |
| | | GhostChat | [] | apk.ghost_chat | [] | 2026-01-29 | | | |
| | | MAILCREEP | [] | win.mailcreep | [] | 2026-01-29 | | | |
| | | CROSSWALK | ['ProxIP', 'Motnug', 'TOMMYGUN'] | win.crosswalk | ['APT41'] | 2026-01-28 | | | |
| | | GRAYRABBIT | [] | win.grayrabbit | ['UNC3569'] | 2026-01-28 | | | |
| | | HelloBot | [] | win.hellobot | ['Earth Berberoka'] | 2026-01-28 | | | |
| | | HUI Loader | ['SIDESTEP'] | win.hui_loader | [] | 2026-01-28 | | | |
| | | KEYPLUG | ['ELFSHELF'] | elf.keyplug | ['APT41'] | 2026-01-28 | | | |
| | | SiestaGraph | ['DRAFTGRAPH'] | win.siesta_graph | [] | 2026-01-28 | | | |
| | | PeckBirdy | [] | js.peckbirdy | [] | 2026-01-28 | | | |
| | | JelusRAT | [] | win.jelus_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | GopherRAT | [] | win.gopher_rat | ['Silent Chollima'] | 2026-01-27 | | | |
| | | PetitPotato | [] | win.petit_potato | ['Silent Chollima'] | 2026-01-27 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2026-01-27 | | | |
| | | Hakuna Matata | [] | win.hakuna_matata | [] | 2026-01-27 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2026-01-27 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT17', 'APT23', 'APT41', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA', 'Webworm'] | 2026-01-27 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2026-01-27 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2026-01-27 | | | |
| | | Amnesia RAT | [] | py.amnesia_rat | [] | 2026-01-27 | | | |
| | | ResidentBat | [] | apk.residentbat | [] | 2026-01-27 | | | |
| | | Amatera | [] | win.amatera | [] | 2026-01-27 | | | |
| | | WRECKSTEEL | [] | ps1.wrecksteel | [] | 2026-01-26 | | | |
| | | HOMESTEEL | [] | vbs.homesteel | [] | 2026-01-26 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2026-01-26 | | | |
| | | Vampire Bot | [] | win.vampire_bot | [] | 2026-01-26 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2026-01-26 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2026-01-26 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2026-01-21 | | | |
| | | Singularity | [] | elf.singularity | [] | 2026-01-21 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2026-01-19 | | | |
| | | Predator | ['PREYHUNTER'] | ios.predator | [] | 2026-01-19 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2026-01-19 | | | |
| | | MINOCAT | [] | elf.minocat | [] | 2026-01-19 | | | |
| | | StallionRAT | [] | win.stallion_rat | ['YoroTrooper'] | 2026-01-19 | | | |
| | | FoalShell | [] | win.foalshell | ['YoroTrooper'] | 2026-01-19 | | | |
| | | Smokest Stealer | [] | js.smokest | [] | 2026-01-19 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2026-01-19 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT10', 'APT32', 'Anunak', 'GALLIUM'] | 2026-01-19 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2026-01-19 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2026-01-19 | | | |
| | | MINIBIKE | [] | win.minibike | [] | 2026-01-19 | | | |
| | | MiniJunk | [] | win.minijunk | [] | 2026-01-19 | | | |
| | | ANGRYREBEL | ['Ghost RAT'] | elf.angryrebel | ['APT 22'] | 2026-01-19 | | | |
| | | NosyDownloader | [] | ps1.nosy_downloader | [] | 2026-01-19 | | | |
| | | Subzero | ['Corelump', 'Jumplump'] | win.subzero | ['Denim Tsunami'] | 2026-01-16 | | | |
| | | Earthworm | [] | win.earthworm | [] | 2026-01-16 | | | |
| | | SharpHound | [] | win.sharphound | [] | 2026-01-16 | | | |
| | | SharpWMI | [] | win.sharpwmi | [] | 2026-01-16 | | | |
| | | Rubeus | [] | win.rubeus | [] | 2026-01-16 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | ['Storm-0249'] | 2026-01-16 | | | |
| | | ViperSoftX | [] | ps1.vipersoftx | [] | 2026-01-15 | | | |
| | | PLUGGYAPE | [] | py.pluggyape | ['Void Blizzard'] | 2026-01-14 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2026-01-14 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2026-01-14 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2026-01-14 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2026-01-14 | | | |
| | | BianLian | [] | win.bianlian | [] | 2026-01-14 | | | |
| | | Sliver | [] | win.sliver | [] | 2026-01-14 | | | |
| | | Venom RAT | [] | win.venom | [] | 2026-01-14 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2026-01-14 | | | |
| | | MedusaLocker | ['AKO Ransomware', 'AKO Doxware', 'MedusaReborn'] | win.medusalocker | [] | 2026-01-12 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2026-01-12 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | ['Alpha Spider', 'RansomHub', 'Vanilla Tempest'] | 2026-01-12 | | | |
| | | WhiteRabbit | [] | elf.whiterabbit | [] | 2026-01-12 | | | |
| | | Royal Ransom | [] | win.royal_ransom | [] | 2026-01-12 | | | |
| | | MedusaHTTP | [] | win.medusa_http | [] | 2026-01-12 | | | |
| | | Archer RAT | ['RustyWater'] | win.archer_rat | [] | 2026-01-12 | | | |
| | | RushDrop | ['ChronosRAT'] | elf.rush_drop | [] | 2026-01-09 | | | |
| | | SilentRaid | ['MystRodX'] | elf.silent_raid | [] | 2026-01-09 | | | |
| | | DriveSwitch | [] | elf.drive_switch | [] | 2026-01-09 | | | |
| | | CrazyHunter | [] | win.crazyhunter | [] | 2026-01-09 | | | |
| | | MaskGramStealer | [] | win.maskgramstealer | [] | 2026-01-05 | | | |
| | | pcTattletale | [] | apk.pctattletale | [] | 2026-01-08 | | | |
| | | Pulsar RAT | [] | win.pulsar_rat | [] | 2026-01-06 | | | |
| | | Plurox | [] | win.plurox | [] | 2019-09-25 | | | |
| | | pngdowner | [] | win.pngdowner | ['APT2', 'Putter Panda'] | 2025-10-01 | | | |
| | | PocoDown | ['Blitz', 'PocoDownloader'] | win.pocodown | ['APT28'] | 2020-03-25 | | | |
| | | Poison Ivy | ['SPIVY', 'pivy', 'poisonivy'] | win.poison_ivy | ['GALLIUM', 'Molerats', 'Mustang Panda', 'Nightshade Panda', 'Pirate Panda', 'Stone Panda', 'TA428', 'Temper Panda'] | 2025-05-21 | | | |