Enter keywords to filter the families below
| OS | | Common Name | Alternative Names | Name | Actors | Last Updated | Status |
|---|
| | | Inferno | [] | win.inferno | [] | 2020-03-13 | | | |
| | | unidentified_003 | [] | py.unidentified_003 | [] | 2020-03-11 | | | |
| | | unidentified_002 | [] | py.unidentified_002 | [] | 2020-03-11 | | | |
| | | PowerRatankba | ['QUICKRIDE.POWER'] | win.power_ratankba | ['Lazarus Group'] | 2020-03-11 | | | |
| | | PIRAT | [] | py.pirat | [] | 2020-03-09 | | | |
| | | Enrume | ['Ransom32'] | js.enrume | [] | 2020-03-06 | | | |
| | | DropboxC2C | [] | py.dropboxc2c | [] | 2020-03-06 | | | |
| | | stealler | [] | py.stealler | [] | 2020-03-04 | | | |
| | | KevDroid | [] | apk.kevdroid | ['APT37'] | 2020-03-03 | | | |
| | | Hand of Thief | ['Hanthie'] | elf.hand_of_thief | [] | 2020-03-02 | | | |
| | | HenBox | [] | apk.henbox | ['HenBox'] | 2020-03-02 | | | |
| | | inter | [] | js.inter | [] | 2019-07-31 | | | |
| | | DNSRat | ['DNSbot'] | js.dnsrat | ['Anunak'] | 2020-02-27 | | | |
| | | Exodus | [] | apk.exodus | [] | 2020-02-27 | | | |
| | | SUCEFUL | [] | win.suceful | [] | 2020-02-27 | | | |
| | | Skimer | [] | win.skimer | [] | 2020-02-27 | | | |
| | | BUFFETLINE | [] | win.buffetline | ['Lazarus Group'] | 2020-02-27 | | | |
| | | WhiteShadow | [] | vbs.whiteshadow | [] | 2020-02-26 | | | |
| | | Asacub | [] | apk.asacub | [] | 2020-02-26 | | | |
| | | Dvmap | [] | apk.dvmap | [] | 2020-02-26 | | | |
| | | FlexNet | ['gugi'] | apk.flexnet | [] | 2020-02-26 | | | |
| | | Marcher | ['ExoBot'] | apk.marcher | [] | 2020-02-26 | | | |
| | | Svpeng | [] | apk.svpeng | [] | 2020-02-26 | | | |
| | | Unidentified APK 004 | [] | apk.unidentified_004 | ['AridViper'] | 2020-02-25 | | | |
| | | POWERBAND | [] | win.powerband | ['APT33'] | 2020-02-14 | | | |
| | | RemoteControl | ['remotecontrolclient'] | win.remotecontrolclient | [] | 2020-02-13 | | | |
| | | Unidentified PS 001 | [] | ps1.unidentified_001 | ['APT-C-12'] | 2020-02-13 | | | |
| | | RogueRobin | [] | ps1.roguerobin | ['DarkHydrus'] | 2020-02-13 | | | |
| | | Unidentified 072 (Metamorfo Loader) | [] | win.unidentified_072 | [] | 2020-02-11 | | | |
| | | CryptoPatronum | [] | win.cryptopatronum | [] | 2020-02-03 | | | |
| | | pupy | [] | elf.pupy | [] | 2020-01-27 | | | |
| | | Rietspoof | [] | win.rietspoof | [] | 2020-01-27 | | | |
| | | Chernolocker | [] | win.chernolocker | [] | 2020-01-26 | | | |
| | | get_pwd | [] | win.get_pwd | [] | 2020-01-23 | | | |
| | | Sparksrv | [] | win.sparksrv | [] | 2020-01-23 | | | |
| | | BitPyLock | [] | win.bitpylock | [] | 2020-01-22 | | | |
| | | beendoor | [] | win.beendoor | ['Operation C-Major'] | 2019-04-08 | | | |
| | | Belonard | [] | win.belonard | [] | 2019-03-12 | | | |
| | | Berbomthum | [] | win.berbomthum | [] | 2018-12-19 | | | |
| | | BfBot | [] | win.bfbot | [] | 2017-04-29 | | | |
| | | BlackRouter | ['BLACKHEART'] | win.blackrouter | [] | 2019-01-23 | | | |
| | | Blackworm RAT | [] | win.blackworm_rat | [] | 2019-08-28 | | | |
| | | BRAIN | [] | win.brain | [] | 2019-03-07 | | | |
| | | BrushaLoader | [] | win.brushaloader | [] | 2019-11-20 | | | |
| | | Cannibal Rat | [] | win.cannibal_rat | [] | 2018-03-17 | | | |
| | | CenterPOS | ['cerebrus'] | win.centerpos | [] | 2018-04-23 | | | |
| | | CLEANTOAD | [] | win.cleantoad | ['Lazarus Group'] | 2019-11-13 | | | |
| | | Devil's Rat | [] | win.devils_rat | [] | 2017-09-18 | | | |
| | | DogHousePower | ['Shelma'] | win.doghousepower | [] | 2018-01-03 | | | |
| | | Unidentified VBS 001 | [] | vbs.unidentified_001 | [] | 2019-05-18 | | | |
| | | ARS VBS Loader | [] | win.ars_loader | [] | 2018-10-25 | | | |
| | | ASPC | [] | win.aspc | [] | 2017-05-19 | | | |
| | | BalkanRAT | [] | win.balkan_rat | [] | 2019-09-09 | | | |
| | | CryptoNight | [] | js.cryptonight | [] | 2018-04-24 | | | |
| | | CukieGrab | ['Roblox Trade Assist'] | js.cukiegrab_crx | [] | 2017-09-14 | | | |
| | | NanHaiShu | [] | js.nanhaishu | ['Leviathan'] | 2019-03-25 | | | |
| | | Powmet | [] | js.powmet | [] | 2017-08-03 | | | |
| | | QUICKCAFE | [] | js.quickcafe | ['Lazarus Group'] | 2019-08-19 | | | |
| | | Unidentified JS 001 (APT32 Profiler) | [] | js.unidentified_001 | ['APT32'] | 2018-06-28 | | | |
| | | Unidentified JS 002 | [] | js.unidentified_js_002 | [] | 2019-06-21 | | | |
| | | witchcoven | [] | js.witchcoven | [] | 2018-04-26 | | | |
| | | Careto | ['Mask', 'Appetite'] | osx.careto | [] | 2017-08-22 | | | |
| | | CoinThief | [] | osx.cointhief | [] | 2019-09-12 | | | |
| | | CpuMeaner | [] | osx.cpumeaner | [] | 2017-12-15 | | | |
| | | CreativeUpdater | [] | osx.creative_updater | [] | 2018-02-07 | | | |
| | | Crisis | [] | osx.crisis | [] | 2018-06-28 | | | |
| | | DarthMiner | [] | osx.darthminer | [] | 2018-12-19 | | | |
| | | Dockster | [] | osx.dockster | [] | 2018-06-28 | | | |
| | | Dummy | [] | osx.dummy | [] | 2018-07-06 | | | |
| | | Eleanor | [] | osx.eleanor | [] | 2019-09-10 | | | |
| | | EvilOSX | [] | osx.evilosx | [] | 2018-02-26 | | | |
| | | FailyTale | [] | osx.failytale | [] | 2019-04-04 | | | |
| | | iMuler | ['Revir'] | osx.imuler | [] | 2019-09-19 | | | |
| | | MacInstaller | [] | osx.macinstaller | [] | 2017-02-15 | | | |
| | | MacRansom | [] | osx.macransom | [] | 2017-06-13 | | | |
| | | MacSpy | [] | osx.macspy | [] | 2017-06-13 | | | |
| | | MacVX | [] | osx.macvx | [] | 2017-02-15 | | | |
| | | Mughthesec | [] | osx.mughthesec | [] | 2017-08-10 | | | |
| | | Olyx | [] | osx.olyx | [] | 2018-06-28 | | | |
| | | Patcher | ['FileCoder', 'Findzip'] | osx.patcher | [] | 2019-04-03 | | | |
| | | Tsunami | [] | osx.tsunami | [] | 2019-04-04 | | | |
| | | Wirenet | [] | osx.wirenet | [] | 2019-06-23 | | | |
| | | Ani-Shell | ['anishell'] | php.anishell | [] | 2019-10-24 | | | |
| | | c99shell | ['c99'] | php.c99 | [] | 2020-01-13 | | | |
| | | Silence DDoS | [] | pl.silence_ddos | [] | 2018-09-06 | | | |
| | | GhostMiner | [] | ps1.ghostminer | [] | 2019-09-30 | | | |
| | | POSHSPY | [] | ps1.poshspy | ['APT 29'] | 2018-05-30 | | | |
| | | PowerBrace | [] | ps1.powerbrace | ['Lazarus Group'] | 2019-07-31 | | | |
| | | powershell_web_backdoor | [] | ps1.powershell_web_backdoor | [] | 2019-10-04 | | | |
| | | PowerSpritz | [] | ps1.powerspritz | ['Lazarus Group'] | 2019-01-23 | | | |
| | | PresFox | [] | ps1.presfox | [] | 2019-02-05 | | | |
| | | skyrat | [] | ps1.skyrat | [] | 2019-06-17 | | | |
| | | Swrort Stager | [] | ps1.swrort | [] | 2019-12-19 | | | |
| | | Tater PrivEsc | [] | ps1.tater | [] | 2017-02-04 | | | |
| | | ThunderShell | [] | ps1.thundershell | [] | 2017-11-16 | | | |
| | | WMImplant | [] | ps1.wmimplant | [] | 2017-04-06 | | | |
| | | BrickerBot | [] | py.brickerbot | [] | 2018-01-12 | | | |
| | | Saphyra | [] | py.saphyra | [] | 2017-02-15 | | | |
| | | FlexiSpy | [] | symbian.flexispy | [] | 2017-05-01 | | | |
| | | forbiks | ['Forbix'] | vbs.forbiks | [] | 2019-09-03 | | | |