Enter keywords to filter the families below
| OS | | Common Name | Alternative Names | Name | Actors | Last Updated | Status |
|---|
| | | GreedyAntd | [] | elf.greedyantd | ['Pacha Group'] | 2019-05-18 | | | |
| | | Hakai | [] | elf.hakai | [] | 2018-09-05 | | | |
| | | HandyMannyPot | [] | elf.handymannypot | [] | 2019-10-04 | | | |
| | | Lady | [] | elf.lady | [] | 2017-04-06 | | | |
| | | LiLock | ['Lilu', 'Lilocked'] | elf.lilock | [] | 2019-09-10 | | | |
| | | lilyofthevalley | [] | elf.lilyofthevalley | [] | 2019-08-12 | | | |
| | | Log Collector | [] | elf.log_collector | [] | 2019-12-18 | | | |
| | | Masuta | ['PureMasuta'] | elf.masuta | ['Nexus Zeta'] | 2025-06-11 | | | |
| | | Mokes | [] | elf.mokes | [] | 2017-10-25 | | | |
| | | Owari | [] | elf.owari | [] | 2018-08-21 | | | |
| | | r2r2 | [] | elf.r2r2 | [] | 2018-06-13 | | | |
| | | Rakos | [] | elf.rakos | [] | 2019-09-01 | | | |
| | | RaspberryPiBotnet | [] | elf.raspberrypibotnet | [] | 2019-10-17 | | | |
| | | rat_hodin | [] | elf.rat_hodin | [] | 2019-08-12 | | | |
| | | rbs_srv | [] | elf.rbs_srv | [] | 2019-08-12 | | | |
| | | CpuMeaner | [] | osx.cpumeaner | [] | 2017-12-15 | | | |
| | | CreativeUpdater | [] | osx.creative_updater | [] | 2018-02-07 | | | |
| | | Crisis | [] | osx.crisis | [] | 2018-06-28 | | | |
| | | DarthMiner | [] | osx.darthminer | [] | 2018-12-19 | | | |
| | | Dockster | [] | osx.dockster | [] | 2018-06-28 | | | |
| | | Dummy | [] | osx.dummy | [] | 2018-07-06 | | | |
| | | Eleanor | [] | osx.eleanor | [] | 2019-09-10 | | | |
| | | EvilOSX | [] | osx.evilosx | [] | 2018-02-26 | | | |
| | | FailyTale | [] | osx.failytale | [] | 2019-04-04 | | | |
| | | iMuler | ['Revir'] | osx.imuler | [] | 2019-09-19 | | | |
| | | MacInstaller | [] | osx.macinstaller | [] | 2017-02-15 | | | |
| | | MacRansom | [] | osx.macransom | [] | 2017-06-13 | | | |
| | | MacVX | [] | osx.macvx | [] | 2017-02-15 | | | |
| | | Mughthesec | [] | osx.mughthesec | [] | 2017-08-10 | | | |
| | | Olyx | [] | osx.olyx | [] | 2018-06-28 | | | |
| | | Patcher | ['FileCoder', 'Findzip'] | osx.patcher | [] | 2019-04-03 | | | |
| | | Tsunami | [] | osx.tsunami | [] | 2019-04-04 | | | |
| | | Wirenet | [] | osx.wirenet | [] | 2019-06-23 | | | |
| | | Ani-Shell | ['anishell'] | php.anishell | [] | 2019-10-24 | | | |
| | | c99shell | ['c99'] | php.c99 | [] | 2020-01-13 | | | |
| | | Silence DDoS | [] | pl.silence_ddos | [] | 2018-09-06 | | | |
| | | GhostMiner | [] | ps1.ghostminer | [] | 2019-09-30 | | | |
| | | POSHSPY | [] | ps1.poshspy | ['APT 29'] | 2018-05-30 | | | |
| | | PowerBrace | [] | ps1.powerbrace | ['Lazarus Group'] | 2019-07-31 | | | |
| | | powershell_web_backdoor | [] | ps1.powershell_web_backdoor | [] | 2019-10-04 | | | |
| | | PowerSpritz | [] | ps1.powerspritz | ['Lazarus Group'] | 2019-01-23 | | | |
| | | PresFox | [] | ps1.presfox | [] | 2019-02-05 | | | |
| | | skyrat | [] | ps1.skyrat | [] | 2019-06-17 | | | |
| | | Swrort Stager | [] | ps1.swrort | [] | 2019-12-19 | | | |
| | | Tater PrivEsc | [] | ps1.tater | [] | 2017-02-04 | | | |
| | | ThunderShell | [] | ps1.thundershell | [] | 2017-11-16 | | | |
| | | WMImplant | [] | ps1.wmimplant | [] | 2017-04-06 | | | |
| | | BrickerBot | [] | py.brickerbot | [] | 2018-01-12 | | | |
| | | Saphyra | [] | py.saphyra | [] | 2017-02-15 | | | |
| | | FlexiSpy | [] | symbian.flexispy | [] | 2017-05-01 | | | |
| | | forbiks | ['Forbix'] | vbs.forbiks | [] | 2019-09-03 | | | |
| | | Iloveyou | ['LoveLetter', 'Love Bug'] | vbs.iloveyou | [] | 2019-05-20 | | | |
| | | Unidentified VBS 001 | [] | vbs.unidentified_001 | [] | 2019-05-18 | | | |
| | | Rurktar | ['RCSU'] | win.rurktar | [] | 2017-08-31 | | | |
| | | Saefko | [] | win.saefko | [] | 2019-08-09 | | | |
| | | Schneiken | [] | win.schneiken | [] | 2018-04-27 | | | |
| | | ScreenLocker | [] | win.screenlocker | [] | 2017-02-15 | | | |
| | | Serpico | [] | win.serpico | [] | 2017-02-15 | | | |
| | | SHARPSTATS | [] | win.sharpstats | ['MuddyWater'] | 2019-06-23 | | | |
| | | sihost | [] | win.sihost | ['APT31'] | 2019-12-04 | | | |
| | | Sobaken | [] | win.sobaken | [] | 2018-07-24 | | | |
| | | Sparkle | [] | win.sparkle | [] | 2019-05-17 | | | |
| | | Spartacus | [] | win.spartacus | [] | 2020-01-21 | | | |
| | | Zezin | [] | win.zezin | [] | 2018-01-02 | | | |
| | | ZUpdater | ['Zpevdo'] | win.zupdater | [] | 2019-08-19 | | | |
| | | ZeroEvil | [] | win.zeroevil | [] | 2018-10-06 | | | |
| | | Stampedo | [] | win.stampedo | [] | 2017-02-15 | | | |
| | | StarLoader | [] | win.starloader | ['Sowbug'] | 2017-11-21 | | | |
| | | Synth Loader | [] | win.synth_loader | [] | 2017-02-15 | | | |
| | | Trump Ransom | [] | win.trump_ransom | [] | 2017-02-15 | | | |
| | | Red Alert | [] | win.red_alert | [] | 2017-02-15 | | | |
| | | Retadup | [] | win.retadup | [] | 2019-08-28 | | | |
| | | rock | ['yellowalbatross'] | win.rock | [] | 2018-09-19 | | | |
| | | RotorCrypt | ['Rotor', 'RotoCrypt'] | win.rotorcrypt | [] | 2019-04-07 | | | |
| | | Unidentified 024 (Ransomware) | [] | win.unidentified_024_ransom | [] | | | | |
| | | Unidentified 028 | [] | win.unidentified_028 | [] | 2017-04-29 | | | |
| | | Unidentified 029 | [] | win.unidentified_029 | [] | 2017-07-05 | | | |
| | | Unidentified 057 | [] | win.unidentified_057 | [] | 2019-04-03 | | | |
| | | Unidentified 066 | [] | win.unidentified_066 | ['Operation C-Major'] | 2019-10-24 | | | |
| | | Unidentified 067 | [] | win.unidentified_067 | ['APT37'] | 2019-11-17 | | | |
| | | Unlock92 | [] | win.unlock92 | [] | 2018-03-20 | | | |
| | | WildFire | [] | win.wildfire | [] | 2016-12-28 | | | |
| | | winlog | [] | win.winlog | [] | 2019-08-12 | | | |
| | | Xwo | [] | win.xwo | [] | 2019-04-03 | | | |
| | | Yatron | [] | win.yatron | [] | 2019-10-11 | | | |
| | | Eredel | [] | win.eredel | [] | 2018-09-21 | | | |
| | | Evrial | [] | win.evrial | [] | 2018-02-01 | | | |
| | | Eye Pyramid | [] | win.eye_pyramid | [] | 2017-02-15 | | | |
| | | FastLoader | [] | win.fastloader | [] | 2020-01-14 | | | |
| | | FireCrypt | [] | win.firecrypt | [] | | | | |
| | | FireMalv | [] | win.firemalv | ['Rocket Kitten'] | 2018-04-17 | | | |
| | | FirstRansom | [] | win.first_ransom | [] | 2017-02-15 | | | |
| | | FlexiSpy | [] | win.flexispy | [] | 2017-05-01 | | | |
| | | FortuneCrypt | [] | win.fortunecrypt | [] | 2019-10-11 | | | |
| | | GalaxyLoader | [] | win.galaxyloader | [] | 2018-03-26 | | | |
| | | gamapos | ['pios'] | win.gamapos | [] | 2018-04-25 | | | |
| | | GearInformer | [] | win.gearinformer | [] | 2017-11-21 | | | |
| | | MajikPos | [] | win.majik_pos | [] | 2019-11-27 | | | |
| | | Manifestus | [] | win.manifestus_ransomware | [] | | | | |
| | | Medre | [] | win.medre | [] | 2018-06-28 | | | |