Enter keywords to filter the families below
| OS | | Common Name | Alternative Names | Name | Actors | Last Updated | Status |
|---|
| | | NanHaiShu | [] | js.nanhaishu | ['Leviathan'] | 2019-03-25 | | | |
| | | Powmet | [] | js.powmet | [] | 2017-08-03 | | | |
| | | QUICKCAFE | [] | js.quickcafe | ['Lazarus Group'] | 2019-08-19 | | | |
| | | Unidentified JS 001 (APT32 Profiler) | [] | js.unidentified_001 | ['APT32'] | 2018-06-28 | | | |
| | | Unidentified JS 002 | [] | js.unidentified_js_002 | [] | 2019-06-21 | | | |
| | | witchcoven | [] | js.witchcoven | [] | 2018-04-26 | | | |
| | | Careto | ['Mask', 'Appetite'] | osx.careto | [] | 2017-08-22 | | | |
| | | CoinThief | [] | osx.cointhief | [] | 2019-09-12 | | | |
| | | CpuMeaner | [] | osx.cpumeaner | [] | 2017-12-15 | | | |
| | | CreativeUpdater | [] | osx.creative_updater | [] | 2018-02-07 | | | |
| | | Crisis | [] | osx.crisis | [] | 2018-06-28 | | | |
| | | DarthMiner | [] | osx.darthminer | [] | 2018-12-19 | | | |
| | | Dockster | [] | osx.dockster | [] | 2018-06-28 | | | |
| | | Dummy | [] | osx.dummy | [] | 2018-07-06 | | | |
| | | Eleanor | [] | osx.eleanor | [] | 2019-09-10 | | | |
| | | EvilOSX | [] | osx.evilosx | [] | 2018-02-26 | | | |
| | | FailyTale | [] | osx.failytale | [] | 2019-04-04 | | | |
| | | iMuler | ['Revir'] | osx.imuler | [] | 2019-09-19 | | | |
| | | MacInstaller | [] | osx.macinstaller | [] | 2017-02-15 | | | |
| | | MacRansom | [] | osx.macransom | [] | 2017-06-13 | | | |
| | | MacSpy | [] | osx.macspy | [] | 2017-06-13 | | | |
| | | MacVX | [] | osx.macvx | [] | 2017-02-15 | | | |
| | | Mughthesec | [] | osx.mughthesec | [] | 2017-08-10 | | | |
| | | Olyx | [] | osx.olyx | [] | 2018-06-28 | | | |
| | | Patcher | ['FileCoder', 'Findzip'] | osx.patcher | [] | 2019-04-03 | | | |
| | | Tsunami | [] | osx.tsunami | [] | 2019-04-04 | | | |
| | | Wirenet | [] | osx.wirenet | [] | 2019-06-23 | | | |
| | | Ani-Shell | ['anishell'] | php.anishell | [] | 2019-10-24 | | | |
| | | c99shell | ['c99'] | php.c99 | [] | 2020-01-13 | | | |
| | | Silence DDoS | [] | pl.silence_ddos | [] | 2018-09-06 | | | |
| | | GhostMiner | [] | ps1.ghostminer | [] | 2019-09-30 | | | |
| | | POSHSPY | [] | ps1.poshspy | ['APT 29'] | 2018-05-30 | | | |
| | | PowerBrace | [] | ps1.powerbrace | ['Lazarus Group'] | 2019-07-31 | | | |
| | | powershell_web_backdoor | [] | ps1.powershell_web_backdoor | [] | 2019-10-04 | | | |
| | | PowerSpritz | [] | ps1.powerspritz | ['Lazarus Group'] | 2019-01-23 | | | |
| | | PresFox | [] | ps1.presfox | [] | 2019-02-05 | | | |
| | | skyrat | [] | ps1.skyrat | [] | 2019-06-17 | | | |
| | | Swrort Stager | [] | ps1.swrort | [] | 2019-12-19 | | | |
| | | Tater PrivEsc | [] | ps1.tater | [] | 2017-02-04 | | | |
| | | ThunderShell | [] | ps1.thundershell | [] | 2017-11-16 | | | |
| | | WMImplant | [] | ps1.wmimplant | [] | 2017-04-06 | | | |
| | | BrickerBot | [] | py.brickerbot | [] | 2018-01-12 | | | |
| | | Saphyra | [] | py.saphyra | [] | 2017-02-15 | | | |
| | | FlexiSpy | [] | symbian.flexispy | [] | 2017-05-01 | | | |
| | | forbiks | ['Forbix'] | vbs.forbiks | [] | 2019-09-03 | | | |
| | | Iloveyou | ['LoveLetter', 'Love Bug'] | vbs.iloveyou | [] | 2019-05-20 | | | |
| | | Unidentified VBS 001 | [] | vbs.unidentified_001 | [] | 2019-05-18 | | | |
| | | ARS VBS Loader | [] | win.ars_loader | [] | 2018-10-25 | | | |
| | | ASPC | [] | win.aspc | [] | 2017-05-19 | | | |
| | | BalkanRAT | [] | win.balkan_rat | [] | 2019-09-09 | | | |
| | | beendoor | [] | win.beendoor | ['Operation C-Major'] | 2019-04-08 | | | |
| | | Belonard | [] | win.belonard | [] | 2019-03-12 | | | |
| | | Berbomthum | [] | win.berbomthum | [] | 2018-12-19 | | | |
| | | BfBot | [] | win.bfbot | [] | 2017-04-29 | | | |
| | | BlackRouter | ['BLACKHEART'] | win.blackrouter | [] | 2019-01-23 | | | |
| | | Blackworm RAT | [] | win.blackworm_rat | [] | 2019-08-28 | | | |
| | | BRAIN | [] | win.brain | [] | 2019-03-07 | | | |
| | | BrushaLoader | [] | win.brushaloader | [] | 2019-11-20 | | | |
| | | Cannibal Rat | [] | win.cannibal_rat | [] | 2018-03-17 | | | |
| | | CenterPOS | ['cerebrus'] | win.centerpos | [] | 2018-04-23 | | | |
| | | CLEANTOAD | [] | win.cleantoad | ['Lazarus Group'] | 2019-11-13 | | | |
| | | CockBlocker | [] | win.cockblocker | [] | 2017-01-10 | | | |
| | | ComradeCircle | [] | win.comrade_circle | [] | 2017-02-15 | | | |
| | | CREAMSICLE | [] | win.creamsicle | ['APT 30'] | 2019-04-17 | | | |
| | | Cryptorium | [] | win.cryptorium | [] | | | | |
| | | CryptoWire | [] | win.cryptowire | [] | 2018-06-13 | | | |
| | | CryptoRansomeware | [] | win.crypto_ransomeware | [] | 2017-02-15 | | | |
| | | CyberSplitter | [] | win.cyber_splitter | [] | 2016-12-27 | | | |
| | | Devil's Rat | [] | win.devils_rat | [] | 2017-09-18 | | | |
| | | DogHousePower | ['Shelma'] | win.doghousepower | [] | 2018-01-03 | | | |
| | | Eredel | [] | win.eredel | [] | 2018-09-21 | | | |
| | | Evrial | [] | win.evrial | [] | 2018-02-01 | | | |
| | | Eye Pyramid | [] | win.eye_pyramid | [] | 2017-02-15 | | | |
| | | FastLoader | [] | win.fastloader | [] | 2020-01-14 | | | |
| | | FireCrypt | [] | win.firecrypt | [] | | | | |
| | | FireMalv | [] | win.firemalv | ['Rocket Kitten'] | 2018-04-17 | | | |
| | | FirstRansom | [] | win.first_ransom | [] | 2017-02-15 | | | |
| | | FlexiSpy | [] | win.flexispy | [] | 2017-05-01 | | | |
| | | FortuneCrypt | [] | win.fortunecrypt | [] | 2019-10-11 | | | |
| | | GalaxyLoader | [] | win.galaxyloader | [] | 2018-03-26 | | | |
| | | gamapos | ['pios'] | win.gamapos | [] | 2018-04-25 | | | |
| | | GearInformer | [] | win.gearinformer | [] | 2017-11-21 | | | |
| | | GhostAdmin | ['Ghost iBot'] | win.ghost_admin | [] | 2017-04-05 | | | |
| | | GoBotKR | [] | win.gobotkr | [] | 2019-07-11 | | | |
| | | GoldenEye | ['Petya/Mischa'] | win.goldeneye | [] | 2017-07-17 | | | |
| | | GoogleDrive RAT | [] | win.google_drive_rat | ['OilRig'] | 2018-03-26 | | | |
| | | Herbst | [] | win.herbst | [] | 2018-01-29 | | | |
| | | Hussar | [] | win.hussar | ['Calypso group'] | 2019-11-12 | | | |
| | | win.innfirat | [] | win.innfirat | [] | 2019-09-19 | | | |
| | | JQJSNICKER | [] | win.jqjsnicker | ['CIA'] | 2017-03-28 | | | |
| | | JUMPALL | [] | win.jumpall | ['APT41'] | 2019-08-13 | | | |
| | | limedownloader | [] | win.limedownloader | [] | 2019-07-31 | | | |
| | | limeminer | [] | win.limeminer | [] | 2019-07-31 | | | |
| | | Limitail | [] | win.limitail | [] | 2017-04-29 | | | |
| | | LiteHTTP | [] | win.litehttp | [] | 2019-09-20 | | | |
| | | Locky Loader | [] | win.locky_loader | [] | 2018-01-11 | | | |
| | | Logedrut | [] | win.logedrut | [] | 2018-04-13 | | | |
| | | MajikPos | [] | win.majik_pos | [] | 2019-11-27 | | | |
| | | Manifestus | [] | win.manifestus_ransomware | [] | | | | |
| | | Medre | [] | win.medre | [] | 2018-06-28 | | | |