| | | Carbanak | ['Anunak', 'Sekur RAT'] | win.carbanak | ['FIN7'] | 2025-01-20 | | | |
| | | Splinter | [] | win.splinter | [] | 2025-01-15 | | | |
| | | Ladon | [] | win.ladon | [] | 2025-01-15 | | | |
| | | Yasso | [] | win.yasso | [] | 2025-01-15 | | | |
| | | scanbox | [] | js.scanbox | ['Leviathan'] | 2025-01-15 | | | |
| | | Sync-Scheduler | [] | win.sync_scheduler | [] | 2025-01-15 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2025-01-15 | | | |
| | | Rubeus | [] | win.rubeus | [] | 2025-01-15 | | | |
| | | Royal Ransom | [] | ps1.royal_ransom | [] | 2025-01-15 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SimpleTea | ['PondRAT', 'SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SimpleTea | [] | osx.simpletea | ['Lazarus Group'] | 2025-01-14 | | | |
| | | HLOADER | [] | osx.hloader | ['Lazarus Group'] | 2025-01-14 | | | |
| | | KANDYKORN | [] | osx.kandykorn | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SUGARLOADER | [] | osx.sugarloader | ['Lazarus Group'] | 2025-01-14 | | | |
| | | FunkSec | [] | win.funksec | [] | 2025-01-14 | | | |
| | | RustBucket | [] | osx.rustbucket | ['Lazarus Group'] | 2025-01-14 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2025-01-14 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2025-01-14 | | | |
| | | Hook | [] | apk.hook | [] | 2025-01-14 | | | |
| | | BianLian | [] | win.bianlian | [] | 2025-01-14 | | | |
| | | NonEuclid RAT | [] | win.noneuclid_rat | [] | 2025-01-09 | | | |
| | | ArdaMax | [] | win.ardamax | [] | 2025-01-07 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2025-01-07 | | | |
| | | PrivateLoader | [] | win.privateloader | [] | 2025-01-07 | | | |
| | | SwaetRAT | [] | win.swaet_rat | [] | 2025-01-07 | | | |
| | | SADBRIDGE | [] | win.sadbridge | [] | 2025-01-02 | | | |
| | | Gosar | [] | win.gosar | [] | 2025-01-02 | | | |
| | | RiseLoader | [] | win.riseloader | [] | 2025-01-02 | | | |
| | | Mailto | ['Koko Ransomware', 'NetWalker'] | win.mailto | [] | 2022-04-07 | | | |
| | | Glutton | [] | php.glutton | [] | 2024-12-20 | | | |
| | | PWNLNX | [] | elf.pwnlnx | [] | 2024-12-20 | | | |
| | | Ngioweb | [] | elf.ngioweb | ['Water Barghest'] | 2024-12-20 | | | |
| | | SSHDoor | [] | elf.sshdoor | [] | 2024-12-20 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2024-12-20 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2024-12-20 | | | |
| | | Winnti | [] | elf.winnti | ['Winnti Umbrella'] | 2024-12-20 | | | |
| | | PUMAKIT | ['PUMA', 'Kitsune'] | elf.pumakit | [] | 2024-12-13 | | | |
| | | DEEPDATA | [] | win.deepdata | [] | 2024-12-16 | | | |
| | | PixPirate | [] | apk.pixpirate | [] | 2024-12-16 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2024-12-16 | | | |
| | | SpyGrace | ['SpyGlace'] | win.spygrace | ['APT-C-60'] | 2024-12-16 | | | |
| | | OctoberSeventh | ['ESET Wiper'] | win.october_seventh | [] | 2024-12-16 | | | |
| | | BiBi | ['BiBi-Windows'] | win.bibi | ['Void Manticore'] | 2024-12-16 | | | |
| | | QuickHeal | [] | win.quickheal | [] | 2024-12-16 | | | |
| | | bugsleep | ['MuddyRot'] | win.bugsleep | [] | 2024-12-16 | | | |
| | | EagleMsgSpy | [] | apk.eagle_msg_spy | [] | 2024-12-13 | | | |
| | | BoneSpy | [] | apk.bone_spy | ['Gamaredon Group'] | 2024-12-13 | | | |
| | | PlainGnome | [] | apk.plain_gnome | ['Gamaredon Group'] | 2024-12-13 | | | |
| | | DroidWatcher | [] | apk.droidwatcher | [] | 2024-12-13 | | | |
| | | CEELOADER | [] | win.ceeloader | ['UNC2452'] | 2024-12-13 | | | |
| | | gokcpdoor | [] | elf.gokcpdoor | [] | 2024-12-13 | | | |
| | | TwoDash | [] | win.twodash | ['Turla'] | 2024-12-12 | | | |
| | | Wipbot | ['Epic', 'Tavdig'] | win.wipbot | ['Turla'] | 2024-12-11 | | | |
| | | Kazuar | [] | win.kazuar | ['Turla'] | 2024-12-11 | | | |
| | | Amadey | [] | win.amadey | [] | 2024-12-11 | | | |
| | | SocksProxyGo | [] | win.socksproxygo | [] | 2024-12-11 | | | |
| | | CopperStealth | [] | win.copperstealth | ['Water Orthrus'] | 2024-12-11 | | | |
| | | CopperStealer | ['Mingloa'] | win.copper_stealer | [] | 2024-12-11 | | | |
| | | js.wd | [] | js.wd | [] | 2024-12-11 | | | |
| | | SEXi | ['Limpopo', 'Formosa', 'Socotra'] | elf.sexi | ['SEXi'] | 2024-12-11 | | | |
| | | MetaStealer | [] | win.metastealer | [] | 2024-12-11 | | | |
| | | RisePro | [] | win.risepro | [] | 2024-12-11 | | | |
| | | PHOTOFORK | [] | win.photofork | [] | 2024-12-11 | | | |
| | | Vermin | [] | win.vermin | [] | 2024-12-11 | | | |
| | | Apostle | [] | win.apostle | ['Pink Sandstorm'] | 2024-12-11 | | | |
| | | TinyTurla | [] | win.tiny_turla | ['Turla'] | 2023-10-05 | | | |
| | | Redosdru | [] | win.redosdru | [] | 2024-12-09 | | | |
| | | Epsilon Stealer | [] | win.epsilon_stealer | [] | 2024-12-09 | | | |
| | | CustomerLoader | [] | win.customerloader | [] | 2024-12-09 | | | |
| | | Fabookie | [] | win.fabookie | [] | 2024-12-09 | | | |
| | | Nullmixer | [] | win.nullmixer | [] | 2024-12-09 | | | |
| | | PseudoManuscrypt | [] | win.pseudo_manuscrypt | [] | 2024-12-09 | | | |
| | | Bootkitty | [] | elf.bootkitty | [] | 2024-12-09 | | | |
| | | MiniPocket | [] | win.minipocket | ['Turla'] | 2024-12-09 | | | |
| | | Wainscot | [] | win.wainscot | [] | 2024-12-09 | | | |
| | | BiBi-Linux | [] | elf.bibi_linux | ['Void Manticore'] | 2024-12-09 | | | |
| | | BloodAlchemy | [] | win.bloodalchemy | [] | 2024-12-09 | | | |
| | | FastCash | [] | aix.fastcash | ['Lazarus Group'] | 2024-12-09 | | | |
| | | CrackedCantil | [] | win.crackedcantil | [] | 2024-12-09 | | | |
| | | Ngioweb | ['Grobios'] | win.ngioweb | [] | 2024-12-09 | | | |
| | | Loki Password Stealer (PWS) | ['Burkina', 'Loki', 'LokiBot', 'LokiPWS'] | win.lokipws | ['SWEED', 'The Gorgon Group', 'Cobalt'] | 2024-12-09 | | | |
| | | Edam | ['SECONDBEST'] | win.edam | [] | 2024-12-09 | | | |
| | | Floxif | [] | win.floxif | [] | 2024-12-06 | | | |
| | | CCleaner Backdoor | ['DIRTCLEANER'] | win.ccleaner_backdoor | [] | 2024-12-06 | | | |
| | | Cicada3301 | [] | win.cicada3301 | [] | 2024-12-06 | | | |
| | | VenomLoader | [] | win.venomloader | [] | 2024-12-06 | | | |
| | | DroidBot | [] | apk.droidbot | [] | 2024-12-06 | | | |
| | | Socks5 Systemz | [] | win.socks5_systemz | [] | 2024-12-06 | | | |
| | | Equationgroup (Sorting) | [] | win.equationgroup | [] | 2024-12-02 | | | |
| | | HawkEye Keylogger | ['HawkEye', 'HawkEye Reborn', 'Predator Pain'] | win.hawkeye_keylogger | [] | 2024-12-02 | | | |
| | | Rekoobe | [] | elf.rekoobe | [] | 2024-12-02 | | | |
| | | AppleJeus | [] | osx.applejeus | ['Lazarus Group'] | 2024-11-29 | | | |
| | | AppleJeus | [] | win.applejeus | ['Lazarus Group'] | 2024-11-29 | | | |
| | | BADCALL | [] | win.badcall | ['Lazarus Group'] | 2024-11-29 | | | |
| | | Bankshot | ['COPPERHEDGE', 'FoggyBrass'] | win.bankshot | ['Lazarus Group'] | 2024-11-29 | | | |
| | | BLINDINGCAN | ['AIRDRY', 'ZetaNile'] | win.blindingcan | ['Lazarus Group'] | 2024-11-29 | | | |
| | | Sierra(Alfa,Bravo, ...) | ['Destover'] | win.sierras | ['Lazarus Group'] | 2024-11-29 | | | |
| | | KEYMARBLE | [] | win.keymarble | ['Lazarus Group'] | 2024-11-29 | | | |
| | | Torisma | [] | win.torisma | ['Lazarus Group'] | 2024-11-29 | | | |