Malpedia - MISP galaxy

Skip to content

MISP galaxy

Malpedia

Initializing search

MISP galaxy

Home
Statistics
360net
360net
- 360.net Threat Actors
Ammunitions
Ammunitions
- Ammunitions
Android
Android
- Android
Atrm
Atrm
- Azure Threat Research Matrix
Attck4fraud
Attck4fraud
- attck4fraud
Backdoor
Backdoor
- Backdoor
Banker
Banker
- Banker
Bhadra framework
Bhadra framework
- Bhadra Framework
Botnet
Botnet
- Botnet
Branded vulnerability
Branded vulnerability
- Branded Vulnerability
Cancer
Cancer
- Cancer
Cert eu govsector
Cert eu govsector
- Cert EU GovSector
China defence universities
China defence universities
- China Defence Universities Tracker
Cmtmf attack pattern
Cmtmf attack pattern
- CONCORDIA Mobile Modelling Framework - Attack Pattern
Country
Country
- Country
Cryptominers
Cryptominers
- Cryptominers
Disarm actortypes
Disarm actortypes
- Actor Types
Disarm countermeasures
Disarm countermeasures
- Countermeasures
Disarm detections
Disarm detections
- Detections
Disarm techniques
Disarm techniques
- Techniques
Election guidelines
Election guidelines
- Election guidelines
Entity
Entity
- Entity
Exploit kit
Exploit kit
- Exploit-Kit
Firearms
Firearms
- Firearms
First dns
First dns
- FIRST DNS Abuse Techniques Matrix
Gsma motif
Gsma motif
- GSMA MoTIF
Handicap
Handicap
- Handicap
Intelligence agencies
Intelligence agencies
- Intelligence Agencies
Interpol dwva
Interpol dwva
- INTERPOL DWVA Taxonomy
Malpedia
Malpedia
- Malpedia Malpedia
  Table of contents
  - FastCash
  - 888 RAT
  - Aberebot
  - AbstractEmu
  - ActionSpy
  - AdoBot
  - AdultSwine
  - Agent Smith
  - AhMyth
  - Alien
  - AmpleBot
  - Anatsa
  - AndroRAT
  - Anubis (Android)
  - AnubisSpy
  - Asacub
  - Ashas
  - ATANK
  - AxBanker
  - BADCALL (Android)
  - BadPatch
  - Bahamut (Android)
  - Basbanke
  - BianLian (Android)
  - BrasDex
  - BRATA
  - Brunhilda
  - BusyGasper
  - CapraRAT
  - CarbonSteal
  - Catelites
  - Cerberus
  - Chameleon
  - Chamois
  - Charger
  - Chinotto (Android)
  - Chrysaor
  - Clientor
  - Clipper
  - CloudAtlas
  - CometBot
  - Connic
  - Coper
  - Coronavirus Android Worm
  - Cpuminer (Android)
  - CryCryptor
  - CyberAzov
  - DAAM
  - Dark Shades
  - DawDropper
  - DEFENSOR ID
  - Dendroid
  - dmsSpy
  - DoubleAgent
  - DoubleLocker
  - Dracarys
  - DragonEgg
  - DroidJack
  - DroidWatcher
  - DualToy (Android)
  - Dvmap
  - Elibomi
  - ERMAC
  - Eventbot
  - ExoBot
  - Exodus
  - FaceStealer
  - FakeAdBlocker
  - Fakecalls
  - FakeSpy
  - FakeGram
  - FastFire
  - FastSpy
  - FileCoder
  - FinFisher (Android)
  - FlexiSpy (Android)
  - FlexNet
  - FluBot
  - FluHorse
  - FlyTrap
  - FunkyBot
  - FurBall
  - Geost
  - Ghimob
  - GhostCtrl
  - Gigabud
  - Ginp
  - GlanceLove
  - GnatSpy
  - GoatRAT
  - Godfather
  - GoldenEagle
  - GoldenRAT
  - GoldDigger
  - goontact
  - GPlayed
  - GriftHorse
  - Guerrilla
  - Gustuff
  - HARDRAIN (Android)
  - HawkShaw
  - HenBox
  - Hermit
  - HeroRAT
  - HiddenAd
  - HilalRAT
  - Hook
  - Hydra
  - IPStorm (Android)
  - IRATA
  - IRRat
  - JadeRAT
  - Joker
  - KevDroid
  - KnSpy
  - Koler
  - KSREMOTE
  - LittleLooter
  - Loki
  - LokiBot
  - LuckyCat
  - Mandrake
  - Marcher
  - MasterFred
  - MazarBot
  - Medusa (Android)
  - Meterpreter (Android)
  - MobileOrder
  - Monokle
  - MoqHao
  - MOrder RAT
  - Mudwater
  - MysteryBot
  - Nexus
  - OmniRAT
  - Oscorp
  - PackChat
  - PhantomLance
  - PhoneSpy
  - PINEFLOWER
  - PixPirate
  - PixStealer
  - PjobRAT
  - Podec
  - X-Agent (Android)
  - Fake Pornhub
  - Premier RAT
  - Rafel RAT
  - RambleOn
  - Rana
  - RatMilad
  - Raxir
  - RedAlert2
  - RemRAT
  - Retefe (Android)
  - Revive
  - Riltok
  - Roaming Mantis
  - Rogue
  - Rootnik
  - Sauron Locker
  - SharkBot
  - SideWinder (Android)
  - SilkBean
  - Skygofree
  - Slempo
  - Slocker
  - SmsAgent
  - SMSspy
  - S.O.V.A.
  - SpyBanker
  - SpyC23
  - SpyMax
  - SpyNote
  - StealthAgent
  - Stealth Mango
  - Svpeng
  - Switcher
  - TalentRAT
  - TangleBot
  - TeleRAT
  - TemptingCedar Spyware
  - ThiefBot
  - TianySpy
  - TinyZ
  - Titan
  - Triada
  - Triout
  - UltimaSMS
  - Unidentified APK 001
  - Unidentified APK 002
  - Unidentified APK 004
  - Unidentified APK 005
  - Unidentified APK 006
  - Unidentified 007 (ARMAAN RAT)
  - Unidentified APK 008
  - VajraSpy
  - vamp
  - VINETHORN
  - Viper RAT
  - Vultur
  - WireX
  - WolfRAT
  - Wroba
  - WyrmSpy
  - Xbot
  - Xenomorph
  - xHelper
  - XploitSPY
  - XRat
  - YellYouth
  - Zanubis
  - Zen
  - ZooPark
  - Ztorg
  - Nightrunner
  - Tunna
  - TwoFace
  - Unidentified ASP 001 (Webshell)
  - Abcbot
  - Abyss Locker
  - ACBackdoor (ELF)
  - AcidRain
  - AgeLocker
  - AirDropBot
  - Aisuru
  - Akira (ELF)
  - AnchorDNS
  - ANGRYREBEL
  - AVrecon
  - azazel
  - B1txor20
  - Babuk (ELF)
  - Backdoorit
  - Irc16
  - BADCALL (ELF)
  - Bashlite
  - BCMPUPnP_Hunter
  - BianLian (ELF)
  - BiBi-Linux
  - Bifrost
  - BigViktor
  - BioSet
  - Black Basta (ELF)
  - BlackCat (ELF)
  - BlackMatter (ELF)
  - Blackrota
  - BlackSuit (ELF)
  - BOLDMOVE (ELF)
  - Break out the Box
  - BotenaGo
  - BPFDoor
  - brute_ratel
  - Bvp47
  - Caja
  - Caligula
  - Capoae
  - CDorked
  - CDRThief
  - Cephei
  - Cetus
  - Chaos (ELF)
  - Chapro
  - Chisel (ELF)
  - Clop (ELF)
  - Cloud Snooper
  - ConnectBack
  - Conti (ELF)
  - Cpuminer (ELF)
  - Cr1ptT0r
  - CronRAT
  - CyclopsBlink
  - Dacls (ELF)
  - Dark
  - Dark Nexus
  - DarkSide (ELF)
  - DarkRadiation
  - DDG
  - ddoor
  - DEADBOLT
  - Denonia
  - Derusbi (ELF)
  - Dofloo
  - Doki
  - DoubleFantasy (ELF)
  - DreamBus
  - Ebury
  - Echobot
  - EnemyBot
  - Erebus (ELF)
  - ESXiArgs
  - EvilGnome
  - EwDoor
  - Exaramel (ELF)
  - ext4
  - Facefish
  - FBot
  - FinFisher (ELF)
  - floodor
  - Fodcha
  - FontOnLake
  - FritzFrog
  - Gitpaste-12
  - Glupteba Proxy
  - GobRAT
  - Godlua
  - GOSH
  - GoTitan
  - GreedyAntd
  - Gwisin (ELF)
  - HabitsRAT (ELF)
  - Haiduc
  - Hajime
  - Hakai
  - HandyMannyPot
  - Hand of Thief
  - HelloBot (ELF)
  - HelloKitty (ELF)
  - HiatusRAT
  - HiddenWasp
  - Hide and Seek
  - HinataBot
  - Hipid
  - Hive (ELF)
  - Horse Shell
  - Hubnr
  - HyperSSL (ELF)
  - iceFire
  - Icnanker
  - INC
  - IoT Reaper
  - IPStorm (ELF)
  - IZ1H9
  - JenX
  - Kaiji
  - Kaiten
  - kerberods
  - KEYPLUG
  - kfos
  - Kinsing
  - KIVARS (ELF)
  - Kobalos
  - Krasue RAT
  - Lady
  - LeetHozer
  - Lightning Framework
  - LiLock
  - lilyofthevalley
  - LiquorBot
  - LockBit (ELF)
  - Loerbas
  - Log Collector
  - Lootwodniw
  - Luna
  - Manjusaka (ELF)
  - Masuta
  - Matryosh
  - Melofee
  - MESSAGETAP
  - Midrashim
  - MiKey
  - Mirai (ELF)
  - Mokes (ELF)
  - Momentum
  - Monti
  - MooBot
  - Moose
  - Mozi
  - MrBlack
  - Mumblehard
  - Nextcry
  - Ngioweb (ELF)
  - Nimbo-C2 (ELF)
  - NiuB
  - NOTROBIN
  - OrBit
  - Owari
  - p0sT5n1F3r
  - P2Pinfect
  - pbot
  - Penquin Turla
  - PerlBot
  - Persirai
  - PingPull
  - Pink
  - PLEAD (ELF)
  - Poseidon (ELF)
  - PRISM
  - PrivetSanya
  - Prometei (ELF)
  - Pro-Ocean
  - pupy (ELF)
  - Qilin
  - QNAPCrypt
  - QSnatch
  - QUIETEXIT
  - r2r2
  - RagnarLocker (ELF)
  - Rakos
  - RansomEXX (ELF)
  - RansomExx2
  - RapperBot
  - RaspberryPiBotnet
  - rat_hodin
  - rbs_srv
  - RedXOR
  - RedAlert Ransomware
  - Rekoobe
  - reptile
  - REvil (ELF)
  - Rex
  - RHOMBUS
  - Rhysida (ELF)
  - Roboto
  - RotaJakiro
  - Royal Ransom (ELF)
  - Rshell
  - SALTWATER
  - Satori
  - SBIDIOT
  - SEASPY
  - ShellBind
  - Shishiga
  - SideWalk (ELF)
  - Silex
  - SimpleTea (ELF)
  - SLAPSTICK
  - SnappyTCP
  - SoWaT
  - Spamtorte
  - SpeakUp
  - Specter
  - Speculoos
  - SprySOCKS
  - SSHDoor
  - Stantinko
  - STEELCORGI
  - Sunless
  - sustes miner
  - Suterusu
  - Sword2033
  - Symbiote
  - SysJoker (ELF)
  - Sysrv-hello (ELF)
  - TeamTNT
  - TheMoon
  - TNTbotinger
  - Torii
  - Trump Bot
  - TSCookie
  - tsh
  - Tsunami (ELF)
  - Turla RAT
  - Umbreon
  - Unidentified Linux 001
  - Unidentified ELF 004
  - Unidentified 005 (Sidecopy)
  - Unidentified ELF 006 (Tox Backdoor)
  - Hive (Vault 8)
  - Vermilion Strike (ELF)
  - VPNFilter
  - WatchBog
  - WellMail
  - elf.wellmess
  - WHIRLPOOL
  - WhiteRabbit
  - Winnti (ELF)
  - Wirenet (ELF)
  - X-Agent (ELF)
  - Xanthe
  - Xaynnalc
  - Xbash
  - xdr33
  - XOR DDoS
  - ZeroBot
  - ZHtrap
  - Zollard
  - ZuoRAT
  - AutoCAD Downloader
  - DualToy (iOS)
  - GuiInject
  - lightSpy
  - Phenakite
  - PoisonCarp
  - Postlo
  - TriangleDB
  - WireLurker (iOS)
  - X-Agent (iOS)
  - AdWind
  - Adzok
  - Banload
  - Blue Banana RAT
  - CrossRAT
  - DynamicRAT
  - EpicSplit RAT
  - FEimea RAT
  - IceRat
  - JavaDispCash
  - JavaLocker
  - jRAT
  - jSpy
  - Octopus Scanner
  - Qarallax RAT
  - Qealler
  - QRat
  - Ratty
  - Sorillus RAT
  - STRRAT
  - SupremeBot
  - Verblecon
  - AIRBREAK
  - Bateleur
  - BeaverTail
  - BELLHOP
  - CACTUSTORCH
  - ChromeBack
  - ClearFake
  - CryptoNight
  - CukieGrab
  - DarkWatchman
  - DNSRat
  - doenerium
  - Enrume
  - EVILNUM (Javascript)
  - FakeUpdateRU
  - FAKEUPDATES
  - GootLoader
  - grelos
  - Griffon
  - inter
  - Jeniva
  - Jetriz
  - jspRAT
  - KopiLuwak
  - LNKR
  - magecart
  - MiniJS
  - More_eggs
  - NanHaiShu
  - NodeRAT
  - ostap
  - ParaSiteSnatcher
  - Parrot TDS
  - PeaceNotWar
  - PindOS
  - Powmet
  - QNodeService
  - QUICKCAFE
  - scanbox
  - SQLRat
  - Starfighter (Javascript)
  - Swid
  - HTML5 Encoding
  - Maintools.js
  - Unidentified JS 001 (APT32 Profiler)
  - Unidentified JS 003 (Emotet Downloader)
  - Unidentified JS 004
  - Unidentified JS 005 (Stealer)
  - Unidentified JS 006 (Winter Wyvern)
  - Unidentified JS 002
  - Valak
  - witchcoven
  - Godzilla Webshell
  - 3CX Backdoor (OS X)
  - AMOS
  - AppleJeus (OS X)
  - Bella
  - Bundlore
  - Careto
  - Casso
  - CDDS
  - Choziosi (OS X)
  - CloudMensis
  - CoinThief
  - Coldroot RAT
  - Convuster
  - CpuMeaner
  - CreativeUpdater
  - Crisis
  - Crossrider
  - Dacls (OS X)
  - DarthMiner
  - DazzleSpy
  - Dockster
  - Dummy
  - Eleanor
  - ElectroRAT
  - EvilOSX
  - EvilQuest
  - FailyTale
  - FinFisher (OS X)
  - FlashBack
  - FruitFly
  - FULLHOUSE
  - GIMMICK (OS X)
  - Gmera
  - HiddenLotus
  - HLOADER
  - iMuler
  - Interception (OS X)
  - Janicab (OS X)
  - JokerSpy
  - KANDYKORN
  - KeRanger
  - Keydnap
  - Kitmos
  - Komplex
  - Lador
  - Lambert (OS X)
  - Laoshu
  - Leverage
  - LockBit (OS X)
  - MacDownloader
  - MacInstaller
  - MacRansom
  - MacSpy
  - MacVX
  - MaMi
  - Manuscrypt
  - Mokes (OS X)
  - Mughthesec
  - NetWire
  - OceanLotus
  - Olyx
  - oRAT
  - OSAMiner
  - Patcher
  - PintSized
  - Pirrit
  - POOLRAT
  - Poseidon (OS X)
  - Proton RAT
  - Pwnet
  - Dok
  - RustBucket (OS X)
  - Shlayer
  - Silver Sparrow
  - SimpleTea (OS X)
  - SUGARLOADER
  - SysJoker (OS X)
  - systemd
  - Tsunami (OS X)
  - Unidentified macOS 001 (UnionCryptoTrader)
  - UpdateAgent
  - Uroburos (OS X)
  - Vigram
  - WatchCat
  - WindTail
  - Winnti (OS X)
  - WireLurker (OS X)
  - Wirenet (OS X)
  - X-Agent (OS X)
  - XCSSET
  - Xloader
  - XSLCmd
  - Yort
  - ZuRu
  - Ani-Shell
  - ANTAK
  - ASPXSpy
  - Behinder
  - c99shell
  - DEWMODE
  - Ensikology
  - p0wnyshell
  - Parrot TDS WebShell
  - PAS
  - Prometheus Backdoor
  - RedHat Hacker WebShell
  - WSO
  - Silence DDoS
  - BlackSun
  - BONDUPDATER
  - CASHY200
  - FlowerPower
  - FRat Loader
  - FTCODE
  - GhostMiner
  - JasperLoader
  - Lazyscripter
  - LightBot
  - Octopus (Powershell)
  - OilRig
  - PhonyC2
  - POSHSPY
  - PowerBrace
  - PowerHarbor
  - PowerPepper
  - POWERPIPE
  - POWERPLANT
  - powershell_web_backdoor
  - PowerShortShell
  - PowerShower
  - POWERSOURCE
  - PowerSpritz
  - POWERSTATS
  - POWERTON
  - POWERTRASH
  - PowerWare
  - PowerZure
  - PowerMagic
  - PowGoop
  - POWRUNER
  - PresFox
  - QUADAGENT
  - RMOT
  - RogueRobin
  - Royal Ransom (Powershell)
  - Schtasks
  - skyrat
  - sLoad
  - Snugy
  - Swrort Stager
  - Tater PrivEsc
  - ThunderShell
  - Unidentified PS 001
  - Unidentified PS 002 (RAT)
  - Unidentified PS 003 (RAT)
  - ViperSoftX
  - WannaMine
  - WannaRen Downloader
  - WMImplant
  - AndroxGh0st
  - Archivist
  - Ares (Python)
  - BrickerBot
  - DropboxC2C
  - Empyrean
  - Guard
  - InvisibleFerret
  - KeyPlexer
  - LaZagne
  - Lofy
  - Loki RAT
  - MASEPIE
  - N3Cr0m0rPh
  - NetWorm
  - PIRAT
  - Poet RAT
  - poweRAT
  - pupy (Python)
  - PyAesLoader
  - PyArk
  - pyback
  - PY#RATION
  - PyVil
  - Responder
  - Saphyra
  - Serpent
  - SpaceCow
  - stealler
  - Stitch
  - unidentified_002
  - unidentified_003
  - Venomous
  - Venus Stealer
  - W4SP Stealer
  - KV
  - FlexiSpy (symbian)
  - CageyChameleon
  - forbiks
  - GGLdr
  - GlowSpark
  - Grinju Downloader
  - HALFBAKED
  - Iloveyou
  - Janicab (VBScript)
  - lampion
  - LitterDrifter
  - lockscreen
  - MOUSEISLAND
  - NodeJS Ransomware
  - RandomQuery
  - Starfighter (VBScript)
  - STARWHALE
  - Unidentified VBS 001
  - Unidentified 002 (Operation Kremlin)
  - Unidentified 003 (Gamaredon Downloader)
  - Unidentified VBS 004 (RAT)
  - Unidentified VBS 005 (Telegram Loader)
  - Unidentified VBS 006 (Telegram Loader)
  - VBREVSHELL
  - WasabiSeed
  - WhiteShadow
  - 000Stealer
  - 3CX Backdoor (Windows)
  - 404 Keylogger
  - 4h_rat
  - 5.t Downloader
  - 7ev3n
  - 8Base
  - 8.t Dropper
  - 9002 RAT
  - Abaddon
  - AbaddonPOS
  - abantes
  - Abbath Banker
  - AbSent Loader
  - ACBackdoor (Windows)
  - ACEHASH
  - AcidBox
  - AcridRain
  - Acronym
  - Action RAT
  - Adamantium Thief
  - AdamLocker
  - Adhubllka
  - AdKoob
  - AdvisorsBot
  - Adylkuzz
  - AESRT
  - Afrodita
  - AgendaCrypt
  - Agent.BTZ
  - Agent Tesla
  - AgfSpy
  - Ahtapot
  - Akira (Windows)
  - Albaniiutas
  - Aldibot
  - Alfonso Stealer
  - Project Alice
  - Alina POS
  - AllaKore
  - Allaple
  - AllcomeClipper
  - Almanahe
  - Alma Communicator
  - AlmaLocker
  - AlmondRAT
  - ALPC Local PrivEsc
  - Alphabet Ransomware
  - AlphaLocker
  - AlphaNC
  - AlphaSeed
  - Alreay
  - Alureon
  - Amadey
  - AMTsol
  - Anatova Ransomware
  - Anchor
  - AnchorMail
  - AnchorMTea
  - Andardoor
  - Andromeda
  - AndroMut
  - Anel
  - AnteFrigus
  - Antilam
  - Anubis (Windows)
  - Anubis Loader
  - APERETIF
  - Apocalipto
  - Apocalypse
  - Apollo
  - Apostle
  - AppleJeus (Windows)
  - Appleseed
  - ArdaMax
  - Arefty
  - Ares (Windows)
  - AresLoader
  - ArguePatch
  - Aria-body
  - Arid Gopher
  - AridHelper
  - Arik Keylogger
  - Arkei Stealer
  - ArrowRAT
  - ARS VBS Loader
  - ARTFULPIE
  - Artra Downloader
  - Asbit
  - AscentLoader
  - ASPC
  - Asprox
  - Asruex
  - Astaroth
  - Astasia
  - AstraLocker
  - AsyncRAT
  - Atharvan
  - Athena
  - AthenaGo RAT
  - ATI-Agent
  - AtlasAgent
  - ATMii
  - ATMitch
  - Atmosphere
  - ATMSpitter
  - ATOMSILO
  - Attor
  - August Stealer
  - AuKill
  - Auriga
  - Aurora
  - Aurora Stealer
  - Avaddon
  - AvastDisabler
  - AVCrypt
  - AvD Crypto Stealer
  - Aveo
  - Ave Maria
  - AvosLocker
  - Unidentified 061 (Windows)
  - Avzhan
  - AXLocker
  - Ayegent
  - Aytoke
  - Azorult
  - Azov Wiper
  - Babadeda
  - Babar
  - Babuk (Windows)
  - BabyLon RAT
  - BABYMETAL
  - BabyShark
  - Bachosens
  - BACKBEND
  - BackConfig
  - BackNet
  - Backoff POS
  - backspace
  - BackSwap
  - BADCALL (Windows)
  - BadEncript
  - badflick
  - BADHATCH
  - BadNews
  - Bagle
  - Bahamut (Windows)
  - Baldr
  - BalkanDoor
  - BalkanRAT
  - Bamital
  - Banatrix
  - bancos
  - Bandit Stealer
  - Bandook
  - bangat
  - Banjori
  - Bankshot
  - BanPolMex RAT
  - Barb(ie) Downloader
  - BarbWire
  - barkiofork
  - Bart
  - BatchWiper
  - Batel
  - BATLOADER
  - BazarBackdoor
  - BazarNimrod
  - BBSRAT
  - BBtok
  - Beapy
  - BEATDROP
  - Bedep
  - Bee
  - beendoor
  - BeepService
  - Belonard
  - Berbomthum
  - BernhardPOS
  - BestKorea
  - BetaBot
  - Bezigate
  - BfBot
  - BHunt
  - BianLian (Windows)
  - BI_D Ransomware
  - bifrose
  - BillGates
  - Binanen
  - BioData
  - bioload
  - BIOPASS
  - Biscuit
  - BISTROMATH
  - BitPyLock
  - Bitsran
  - Bitter RAT
  - BitRAT
  - Bizzaro
  - BKA Trojaner
  - Black Basta (Windows)
  - BlackByte
  - BlackCat (Windows)
  - BLACKCOFFEE
  - BlackEnergy
  - BlackGuard
  - BlackKingdom Ransomware
  - BlackLotus
  - BlackMagic
  - BlackMatter (Windows)
  - BlackNET RAT
  - BlackNix RAT
  - BlackPOS
  - BlackRemote
  - BlackRevolution
  - BlackRouter
  - Blackruby
  - BlackShades
  - BlackSnake
  - BlackSoul
  - BlackSuit (Windows)
  - Blackworm RAT
  - BleachGap
  - BLINDINGCAN
  - BLINDTOAD
  - Blister
  - win.trojan.bloodalchemy
  - BloodyStealer
  - BlueFox
  - BLUEHAZE
  - BLUELIGHT
  - BlueNoroff
  - BlueShell
  - BlueSky
  - BLUETHER
  - BluStealer
  - BOATLAUNCH
  - Boaxxe
  - Bobik
  - Bohmini
  - BOLDMOVE (Windows)
  - Bolek
  - BookCodes RAT
  - Book of Eli
  - Bookworm
  - BOOMBOX
  - BOOSTWRITE
  - BOOTWRECK
  - Borat RAT
  - Borr
  - BottomLoader
  - Bouncer
  - BoxCaon
  - Bozok
  - BRAIN
  - Brambul
  - BravoNC
  - BrbBot
  - BreachRAT
  - Breakthrough
  - Bredolab
  - BrittleBush
  - BROKEYOLK
  - BROLER
  - Bruh Wiper
  - BrushaLoader
  - Brute Ratel C4
  - BrutPOS
  - BS2005
  - BTCWare
  - BUBBLEWRAP
  - Buer
  - BUFFETLINE
  - BUGHATCH
  - Buhtrap
  - BumbleBee
  - Bundestrojaner
  - BundleBot
  - Bunitu
  - Buterat
  - Buzus
  - BYEBY
  - c0d0so0
  - CabArt
  - CaddyWiper
  - CadelSpy
  - CALMTHORN
  - Cameleon
  - campoloader
  - CamuBot
  - Cannibal Rat
  - Cannon
  - Carbanak
  - Carberp
  - Cardinal RAT
  - CargoBay
  - CARROTBALL
  - CarrotBat
  - Casper
  - CatB
  - Catchamas
  - CCleaner Backdoor
  - CEELOADER
  - CenterPOS
  - Cerber
  - Cerbu
  - CetaRAT
  - ChaChi
  - Chaes
  - Chainshot
  - CHAIRSMACK
  - Chaos (Windows)
  - Chaperone
  - ChargeWeapon
  - CHCH
  - ChChes
  - CHEESETRAY
  - Chernolocker
  - CherryPicker POS
  - ChewBacca
  - Chimera
  - CHINACHOPPER
  - Chinad
  - ChinaJm
  - Chinotto (Windows)
  - Chinoxy
  - Chir
  - Chisel (Windows)
  - ChiserClient
  - Choziosi (Windows)
  - Chthonic
  - cifty
  - Cinobi
  - Cinoshi
  - Citadel
  - Clambling
  - CLASSFON
  - CLEANTOAD
  - Client Maximus
  - ClipBanker
  - Clipog
  - Clop (Windows)
  - CLOUDBURST
  - CloudEyE
  - CloudWizard
  - CloudDuke
  - CMSBrute
  - CMSTAR
  - CoalaBot
  - CobaltMirage FRP
  - Cobalt Strike
  - Cobian RAT
  - CobInt
  - Cobra Carbon System
  - CockBlocker
  - CodeKey
  - CodeCore
  - Cohhoc
  - Coinminer
  - coldbrew
  - ColdLock
  - Cold$eal
  - ColdStealer
  - Colibri Loader
  - Collection RAT
  - CollectorGoomba
  - Colony
  - Combojack
  - Combos
  - ComeBacker
  - Comfoo
  - ComLook
  - CommonMagic
  - ComodoSec
  - COMpfun
  - Computrace
  - ComradeCircle
  - concealment_troy
  - Conficker
  - Confucius
  - Conti (Windows)
  - Contopee
  - CookieBag
  - CopperStealer
  - Corebot
  - CoreDN
  - Coreshell
  - CoronaVirus Ransomware
  - CosmicDuke
  - Cotx RAT
  - Cova
  - Covicli
  - Covid22
  - CoViper
  - COZYDUKE
  - crackshot
  - CradleCore
  - CRAT
  - CREAMSICLE
  - CredoMap
  - Credraptor
  - CreepySnail
  - CreepExfil
  - Crenufs
  - Crimson RAT
  - CrimsonIAS
  - Cring
  - CrossLock
  - CROSSWALK
  - Croxloader
  - CruLoader
  - Crutch
  - Cryakl
  - CryLocker
  - CrypMic
  - Crypt0l0cker
  - CryptBot
  - CrypticConvo
  - CryptNET
  - CryptoClippy
  - CryptoDarkRubix
  - CryptoJoker
  - CryptoLocker
  - CryptoLuck
  - CryptoMix
  - CryptoPatronum
  - Cryptorium
  - CryptoShield
  - CryptoShuffler
  - Cryptowall
  - CryptoWire
  - CryptoFortress
  - CryptoRansomeware
  - CryptXXXX
  - Crytox
  - CsExt
  - csharp-streamer RAT
  - CTB Locker
  - Cuba
  - Cuegoe
  - Cueisfry
  - Cur1Downloader
  - Curator
  - Cursed Murderer
  - CustomerLoader
  - Cutlet
  - Cutwail
  - CyberGate
  - CyberSplitter
  - CycBot
  - Cyrat
  - cysxl
  - Dacls (Windows)
  - DADJOKE
  - DADSTACHE
  - Dairy
  - DanaBot
  - danbot
  - DarkBit
  - DarkCloud Stealer
  - DarkComet
  - DARKDEW
  - DarkEye
  - DarkGate
  - DarkIRC
  - DarkLoader
  - DarkMe
  - DarkMegi
  - Darkmoon
  - DarkPink
  - DarkPulsar
  - DarkRat
  - DarkShell
  - DarkSide (Windows)
  - Darksky
  - DarkStRat
  - DarkTequila
  - DarkTortilla
  - Darktrack RAT
  - DarkVNC
  - Daserf
  - DataExfiltrator
  - Datper
  - Daxin
  - DBatLoader
  - DBoxAgent
  - DcDcrypt
  - DCRat
  - DCSrv
  - DDKeylogger
  - DDKONG
  - DEADWOOD
  - DealPly
  - dearcry
  - DeathRansom
  - DECAF
  - Decebal
  - DeepCreep
  - DeepRAT
  - Defray
  - Deimos
  - DeimosC2
  - DeliveryCheck
  - Delta(Alfa,Bravo, ...)
  - DeltaStealer
  - Dented
  - Deprimon
  - DeputyDog
  - DeriaLock
  - DeroHE
  - Derusbi (Windows)
  - DesertBlade
  - Devil's Rat
  - DevOpt
  - Dexbia
  - Dexphot
  - Dexter
  - Dharma
  - DiamondFox
  - Diavol
  - DICELOADER
  - DILLJUICE
  - DilongTrash
  - Dimnie
  - DinodasRAT
  - DinoTrain
  - DirCrypt
  - DirtyMoe
  - Disk Knight
  - DispCashBR
  - DispenserXFS
  - DistTrack
  - Divergent
  - Diztakun
  - DLRAT
  - DMA Locker
  - DMSniff
  - DneSpy
  - DNSChanger
  - DNSMessenger
  - DNSpionage
  - dnWipe
  - DogHousePower
  - Minodo
  - DONOT
  - donut_injector
  - DoorMe
  - DoppelDridex
  - DoppelPaymer
  - NgrBot
  - Dorshel
  - Dosia
  - DOSTEALER
  - Dot Ransomware
  - DOUBLEBACK
  - DoubleFantasy (Windows)
  - DoubleFinger
  - DoublePulsar
  - DoubleZero
  - Downdelph
  - Downeks
  - DownPaper
  - DramNudge
  - DRATzarus
  - DreamBot
  - Dridex
  - DRIFTPIN
  - Dripion
  - DriveOcean
  - Drokbk
  - DropBook
  - DROPSHOT
  - Dtrack
  - DualToy (Windows)
  - DarkHotel
  - DUBrute
  - DUCKTAIL
  - Dumador
  - DuQu
  - DUSTMAN
  - Duuzer
  - DYEPACK
  - DynamicStealer
  - Dyre
  - EagerBee
  - EagleMonitorRAT
  - EASYNIGHT
  - Easy Stealer
  - EDA2
  - Egregor
  - EHDevel
  - Ekipa RAT
  - ELECTRICFISH
  - ElectricPowder
  - Elirks
  - Elise
  - ElizaRAT
  - El Machete APT Backdoor Dropper
  - ELMER
  - Emdivi
  - Emissary
  - Emotet
  - Empire Downloader
  - Emudbot
  - Enfal
  - Enigma Loader
  - Entropy
  - EntryShell
  - Enviserv
  - EnvyScout
  - Epsilon Red
  - EquationDrug
  - Equationgroup (Sorting)
  - Erbium Stealer
  - Erebus (Windows)
  - Eredel
  - Erica Ransomware
  - Eris
  - ESPecter
  - EternalRocks
  - EternalPetya
  - Eternity Clipper
  - Eternity Ransomware
  - Eternity Stealer
  - Eternity Worm
  - EtumBot
  - Evilbunny
  - EvilExtractor
  - EvilGrab
  - EVILNUM (Windows)
  - EvilPlayout
  - EvilPony
  - Evrial
  - Exaramel (Windows)
  - ExByte
  - Excalibur
  - MS Exchange Tool
  - Exile RAT
  - ExMatter
  - Exorcist
  - Expiro
  - ExplosiveRAT
  - Xtreme RAT
  - Eye Pyramid
  - EYService
  - Fabookie
  - FakeCry
  - FakeRean
  - FakeTC
  - FakeWord
  - fancyfilter
  - Fanny
  - FantomCrypt
  - Farseer
  - FastLoader
  - FastPOS
  - FatalRat
  - FatDuke
  - Fauppod
  - FCT
  - FeedLoad
  - Felismus
  - Felixroot
  - fengine
  - Feodo
  - FFDroider
  - Ficker Stealer
  - FileIce
  - Filerase
  - Final1stSpy
  - FindPOS
  - FinFisher RAT
  - FINTEAM
  - Fireball
  - FireBird RAT
  - Fire Chili
  - FireCrypt
  - FireMalv
  - FirstRansom
  - FishMaster
  - FiveHands
  - Flagpro
  - Flame
  - FLASHFLOOD
  - FlawedAmmyy
  - FlawedGrace
  - FlexiSpy (Windows)
  - FlokiBot
  - FlowCloud
  - FlowerShop
  - Floxif
  - Flusihoc
  - FlyingDutchman
  - FlyStudio
  - Fobber
  - FONIX
  - ForestTiger
  - Formbook
  - FormerFirstRAT
  - FortuneCrypt
  - FoxSocket
  - FRat
  - Freenki Loader
  - FriedEx
  - FudModule
  - win.fujinama
  - FunnySwitch
  - FunnyDream
  - Furtim
  - FusionDrive
  - FuwuqiDrama
  - FuxSocy
  - Gacrux
  - GalaxyLoader
  - gamapos
  - Gameover DGA
  - Gameover P2P
  - GamePlayerFramework
  - Gamotrol
  - Gandcrab
  - Gasket
  - Gaudox
  - Gauss
  - Gazer
  - GCleaner
  - gcman
  - Gdrive
  - GearInformer
  - GEARSHIFT
  - GEMCUTTER
  - GeminiDuke
  - Get2
  - GetMail
  - GetMyPass
  - get_pwd
  - Gh0stBins
  - Gh0stTimes
  - GHAMBAR
  - Ghole
  - GhostEmperor
  - Gh0stnet
  - GhostAdmin
  - GhostLocker
  - Ghost RAT
  - GhostSecret
  - Gibberish
  - Giffy
  - GIMMICK (Windows)
  - Ginwui
  - Ginzo Stealer
  - Glasses
  - GlassRAT
  - GlitchPOS
  - GlobeImposter
  - Globe
  - GlooxMail
  - Glupteba
  - GoBotKR
  - goCryptoLocker
  - Godlike12
  - goDoH
  - Godzilla Loader
  - Gofing
  - Goggles
  - GoGoogle
  - GOLDBACKDOOR
  - GoldenEye
  - GoldenHelper
  - GoldenSpy
  - GoldMax
  - GoldDragon
  - Golroted
  - GoMet
  - Gomorrah stealer
  - Goodor
  - GoogleDrive RAT
  - GooPic Drooper
  - GootKit
  - Gophe
  - Gopuram
  - GOTROJ
  - GovRAT
  - Gozi
  - GPCode
  - GrabBot
  - Graftor
  - GRAMDOOR
  - Grandoreiro
  - GrandSteal
  - GraphDrop
  - GraphicalNeutrino
  - Graphican
  - Graphiron
  - Graphite
  - Graphon
  - GraphSteel
  - Grateful POS
  - Gratem
  - Gravity RAT
  - GREASE
  - GreenShaitan
  - GreetingGhoul
  - GreyEnergy
  - GRILLMARK
  - GRIMAGENT
  - GrimPlant
  - GROK
  - Growtopia
  - GRUNT
  - gsecdump
  - GSpy
  - GUP Proxy Tool
  - Gwisin (Windows)
  - H1N1 Loader
  - HabitsRAT (Windows)
  - Hacksfase
  - HackSpy
  - Hades
  - Hakbit
  - HALFRIG
  - Hamweq
  - Hancitor
  - HappyLocker (HiddenTear?)
  - HARDRAIN (Windows)
  - Harnig
  - Haron Ransomware
  - HavanaCrypt
  - Havex RAT
  - Havoc
  - HAWKBALL
  - HawkEye Keylogger
  - HazyLoad
  - HDMR
  - HDRoot
  - HeaderTip
  - Headlace
  - Helauto
  - HelloBot (Windows)
  - HelloKitty (Windows)
  - Helminth
  - Heloag
  - HemiGate
  - Herbst
  - Heriplor
  - Hermes
  - HermeticWiper
  - HermeticWizard
  - HerpesBot
  - HesperBot
  - heyoka
  - HiAsm
  - Hidden Bee
  - HiddenTear
  - HideDRV
  - HIGHNOON
  - HIGHNOON.BIN
  - HIGHNOTE
  - HijackLoader
  - HiKit
  - HILDACRYPT
  - himan
  - Himera Loader
  - Hisoka
  - Hive (Windows)
  - Hi-Zor RAT
  - HLUX
  - Holcus Installer (Adware)
  - HOLERUN
  - homefry
  - HookInjEx
  - HOPLIGHT
  - Hopscotch
  - HorusEyes RAT
  - Horus Eyes RAT
  - HOTCROISSANT
  - HOTWAX
  - Houdini
  - HtBot
  - htpRAT
  - HTran
  - HttpBrowser
  - httpdropper
  - HTTPSnoop
  - HTTP(S) uploader
  - http_troy
  - HUI Loader
  - Hunter Stealer
  - Hupigon
  - HuskLoader
  - Hussar
  - HxDef
  - HyperBro
  - HYPERSCRAPE
  - HyperSSL (Windows)
  - HZ RAT
  - Icarus
  - IcedID
  - IcedID Downloader
  - Icefog
  - win.icexloader
  - Ice IX
  - IconDown
  - IconicStealer
  - IcyHeart
  - IDKEY
  - IISniff
  - IISpy
  - IMAPLoader
  - Imecab
  - Imminent Monitor RAT
  - Immortal Stealer
  - ImprudentCook
  - INCONTROLLER
  - Incubator
  - IndigoDrop
  - Industrial Spy
  - Industroyer
  - INDUSTROYER2
  - Inferno
  - InfinityLock
  - InfoDot
  - Infy
  - Inlock
  - InnaputRAT
  - win.innfirat
  - Interception (Windows)
  - Invicta Stealer
  - InvisiMole
  - IPStorm (Windows)
  - Ironcat
  - IRONHALO
  - IronNetInjector
  - IronWind
  - IsaacWiper
  - ISFB
  - ISMAgent
  - ISMDoor
  - iSpy Keylogger
  - IsraBye
  - ISR Stealer
  - IsSpace
  - IXWare
  - Jackal
  - JackPOS
  - Jaff
  - Jager Decryptor
  - Jaku
  - JanelaRAT
  - Janeleiro
  - jason
  - Jasus
  - JCry
  - Jeno
  - JessieConTea
  - JhoneRAT
  - Jigsaw
  - Jimmy
  - JLORAT
  - Joanap
  - Joao
  - win.JobCrypter
  - Jolob
  - JQJSNICKER
  - JripBot
  - JSOutProx
  - JSSLoader
  - JuicyPotato
  - JUMPALL
  - Jupiter
  - KAgent
  - Kami
  - Karagany
  - Kardon Loader
  - Karius
  - Karkoff
  - Karma
  - KasperAgent
  - Kazuar
  - KazyLoader
  - KDC Sponge
  - Kegotip
  - KEKW
  - Kelihos
  - Keona
  - KerrDown
  - Ketrican
  - Ketrum
  - KeyBase
  - KeyBoy
  - APT3 Keylogger
  - KEYMARBLE
  - KGH_SPY
  - Khonsari
  - KHRAT
  - Kikothac
  - KillAV
  - KillDisk
  - KilllSomeOne
  - KimJongRat
  - Kimsuky
  - Kingminer
  - KINS
  - KIVARS (Windows)
  - Klackring
  - KleptoParasite Stealer
  - KlingonRAT
  - KLRD
  - Knot
  - Koadic
  - KoiVM
  - KokoKrypt
  - KOMPROGO
  - Konni
  - KoobFace
  - Korlia
  - Kovter
  - KPOT Stealer
  - Krachulka
  - Kraken
  - KrakenKeylogger
  - KrBanker
  - KrDownloader
  - Kronos
  - KryptoCibule
  - KSL0T
  - Kuaibu
  - Kuluoz
  - Kurton
  - Kutaki
  - Kwampirs
  - Ladon
  - LALALA Stealer
  - Lambert (Windows)
  - LambLoad
  - Lamdelin
  - LaplasClipper
  - LatentBot
  - Laturo Stealer
  - LazarDoor
  - LazarLoader
  - KillDisk (Lazarus)
  - Laziok
  - LazyCat
  - LCPDot
  - LDR4
  - Leakthemall
  - Leash
  - Lemon Duck
  - Leouncia
  - Lethic
  - LetMeOut
  - LgoogLoader
  - Liderc
  - LIGHTBUNNY
  - LightlessCan
  - LightNeuron
  - Lightning Stealer
  - LIGHTWORK
  - Ligsterac
  - Lilith
  - limedownloader
  - limeminer
  - LimePad
  - LimeRAT
  - Main Features
  - Limitail
  - LinseningSvr
  - LIONTAIL
  - Listrix
  - LiteDuke
  - LiteHTTP
  - LOBSHOT
  - LockBit (Windows)
  - LockerGoga
  - LockFile
  - Locky
  - Locky (Decryptor)
  - Locky Loader
  - LockPOS
  - Loda
  - LODEINFO
  - Logedrut
  - LogPOS
  - Logtu
  - LoJax
  - LokiLocker
  - Loki Password Stealer (PWS)
  - Lokorrito
  - LOLSnif
  - LONGWATCH
  - looChiper
  - Lookback
  - L0rdix
  - Lorenz
  - Loup
  - LOWBALL
  - LOWKEY
  - LOWZERO
  - LPEClient
  - lsassDumper
  - Lu0Bot
  - LuaDream
  - Luca Stealer
  - Lucifer
  - Luminosity RAT
  - Lumma Stealer
  - LunchMoney
  - Lurk
  - Luzo
  - Lyceum .NET DNS Backdoor
  - Lyceum .NET TCP Backdoor
  - Lyceum Golang HTTP Backdoor
  - Lyposit
  - M00nD3V Logger
  - m0yv
  - MACAMAX
  - Macaw
  - Machete
  - MadMax
  - Magala
  - Maggie
  - MagicRAT
  - Magniber
  - Mailto
  - Mail-O
  - MajikPos
  - Makadocs
  - MakLoader
  - Makop
  - Maktub
  - MalumPOS
  - Mamba
  - ManameCrypt
  - Mango
  - Mangzamel
  - Manifestus
  - ManItsMe
  - Manjusaka (Windows)
  - Maoloa
  - MAPIget
  - Marap
  - Mariposa
  - MarkiRAT
  - MarraCrypt
  - Mars
  - Mars Stealer
  - Masad Stealer
  - MASS Logger
  - Matanbuchus
  - Matiex
  - Matrix Banker
  - Matrix Ransom
  - Matryoshka RAT
  - Matsnu
  - Maudi
  - Maui Ransomware
  - Maxtrilha
  - Maze
  - MBRlock
  - MBR Locker
  - Mebromi
  - MECHANICAL
  - Medre
  - Medusa (Windows)
  - MedusaLocker
  - Meduza Stealer
  - MegaCortex
  - MegaCreep
  - MeguminTrojan
  - Mekotio
  - Melcoz
  - Meow
  - MercurialGrabber
  - Merdoor
  - Merlin
  - Mespinoza
  - MetadataBin
  - METALJACK
  - Metamorfo
  - MetaStealer
  - Meteor
  - Meterpreter (Windows)
  - Mevade
  - Mewsei
  - MgBot
  - Miancha
  - Micrass
  - MicroBackdoor
  - Microcin
  - Micropsia
  - Midas
  - Mikoponi
  - Milan
  - MILKMAID
  - Milum
  - mim221
  - Mimic Ransomware
  - MimiKatz
  - Mindware
  - MINEBRIDGE
  - MiniASP
  - miniBlindingCan
  - MiniDuke
  - MiniStealer
  - miniTypeFrame
  - MintStealer
  - Mirage
  - MirageFox
  - Mirai (Windows)
  - MirrorBlast
  - MirrorKey
  - Misdat
  - Misfox
  - Misha
  - Mispadu
  - MISTCLOAK
  - MISTYVEAL
  - Miuref
  - MMON
  - MM Core
  - MobiRAT
  - Mocky LNK
  - Mocton
  - ModernLoader
  - MoDi RAT
  - ModPipe
  - ModPOS
  - Mofksys
  - Moisha Ransomware
  - Moker
  - Mokes (Windows)
  - Mole
  - MoleNet
  - Molerat Loader
  - Monero Miner
  - Money Message
  - mongall
  - MontysThree
  - MoonBounce
  - MoonWind
  - MoriAgent
  - Moriya
  - Morphine
  - MortalKombat
  - Morto
  - MosaicRegressor
  - Moserpass
  - Mosquito
  - Mount Locker
  - Moure
  - mozart
  - MPKBot
  - MQsTTang
  - MRAC
  - MrDec
  - MrPeter
  - MuddyC2Go
  - MulCom
  - Multigrain POS
  - murkytop
  - Murofet
  - Mutabaha
  - MyDogs
  - MyDoom
  - MyKings Spreader
  - MyloBot
  - MysterySnail
  - Mystic Stealer
  - MZRevenge
  - N40
  - Nabucur
  - NACHOCHEESE
  - Nagini
  - Naikon
  - Nanocore RAT
  - NanoLocker
  - NAPLISTENER
  - Narilam
  - Nautilus
  - NavRAT
  - nccTrojan
  - Nebulae
  - Necurs
  - NedDnLoader
  - Nefilim
  - Nemesis
  - Nemim
  - Nemty
  - Nerbian RAT
  - neshta
  - NESTEGG
  - NetC
  - NetDooka
  - NETEAGLE
  - NetfilterRootkit
  - NetFlash
  - NetKey
  - Netrepser
  - NetSpy
  - NetSupportManager RAT
  - NetTraveler
  - NetWire RC
  - Neuron
  - Neutrino
  - Neutrino POS
  - NewBounce
  - NewCore RAT
  - NewPass
  - NewPosThings
  - NewsReels
  - NewCT
  - Nexster Bot
  - NexusLogger
  - Ngioweb (Windows)
  - NGLite
  - Nibiru
  - NightClub
  - Nighthawk
  - NightSky
  - NimbleMamba
  - Nimbo-C2 (Windows)
  - NimGrabber
  - Nimplant
  - Nimrev
  - NimBlackout
  - NineRAT
  - NirCmd
  - nitlove
  - Nitol
  - Nitro
  - Nitrokod
  - NixScare Stealer
  - NjRAT
  - nmass malware
  - Nocturnal Stealer
  - NodeStealer
  - Nokki
  - Nokoyawa Ransomware
  - NominatusToxicBattery
  - Nopyfy
  - NorthStar
  - Nosu
  - Nova Stealer
  - NoxPlayer
  - Nozelesn (Decryptor)
  - nRansom
  - NuggetPhantom
  - Nullmixer
  - Numando
  - NVISOSPIT
  - N-W0rm
  - Nymaim
  - Nymaim2
  - Oblique RAT
  - Obscene
  - ObserverStealer
  - Oceansalt
  - Octopus (Windows)
  - OddJob
  - Oderoor
  - Odinaff
  - Okrum
  - OLDBAIT
  - Olympic Destroyer
  - ONHAT
  - Oni
  - OnionDuke
  - OnlinerSpambot
  - OopsIE
  - Opachki
  - OpcJacker
  - OpenSUpdater
  - OpenCarrot
  - OpGhoul
  - OpBlockBuster
  - ORANGEADE
  - OrcaRAT
  - Orchard
  - Orcus RAT
  - Ordinypt
  - OriginBot
  - OriginLogger
  - ORPCBackdoor
  - Oski Stealer
  - Osno
  - Ousaban
  - OutCrypt
  - Outlook Backdoor
  - OutSteel
  - Overlay RAT
  - OvidiyStealer
  - owaauth
  - Owlproxy
  - Owowa
  - OxtaRAT
  - OZH RAT
  - Ozone RAT
  - PadCrypt
  - paladin
  - PandaBanker
  - Panda Stealer
  - Pandora
  - Pandora RAT
  - Paradies Clipper
  - Paradise
  - Parallax RAT
  - parasite_http
  - PartyTicket
  - Passlock
  - Pay2Key
  - PayloadBIN
  - PcShare
  - PEBBLEDASH
  - PeddleCheap
  - Pekraut
  - Penco
  - PennyWise Stealer
  - Peppy RAT
  - PetrWrap
  - Petya
  - pgift
  - PhanDoor
  - phemedrone_stealer
  - Philadephia Ransom
  - Phobos
  - Phoenix Keylogger
  - Phoenix Locker
  - Phonk
  - PHOREAL
  - Phorpiex
  - PHOTOFORK
  - PHOTOLITE
  - PhotoLoader
  - PICKPOCKET
  - PIEHOP
  - Pierogi
  - Pikabot
  - PILLOWMINT
  - PinchDuke
  - PingBack
  - pipcreat
  - PipeMon
  - PipeSnoop
  - PirateStealer
  - pirpi
  - Pitou
  - PittyTiger RAT
  - Pkybot
  - PLAINTEE
  - PLAY
  - playwork
  - PLEAD (Windows)
  - Ploutus ATM
  - ployx
  - PlugX
  - Plurox
  - pngdowner
  - PNGLoad
  - PocoDown
  - poisonplug
  - Poison Ivy
  - Poison RAT
  - Poldat
  - PolPo
  - PolyglotDuke
  - Polyglot
  - PolyVice
  - Pony
  - PoohMilk Loader
  - POORTRY
  - PoorWeb
  - Popcorn Time
  - PortDoor
  - portless
  - poscardstealer
  - PoshC2
  - PoSlurp
  - PostNapTea
  - Poulight Stealer
  - Povlsomware
  - Poweliks
  - POWERBAND
  - PowerCat
  - PowerDuke
  - powerkatz
  - PowerLoader
  - PowerPool
  - PowerShellRunner
  - Powersniff
  - PowerRatankba
  - prb_backdoor
  - Predator The Thief
  - Prestige
  - Prikormka
  - Prilex
  - PrincessLocker
  - PrivateLoader
  - PRIVATELOG
  - Project Hook POS
  - Prometei (Windows)
  - Prometheus
  - proteus
  - Proto8RAT
  - ProtonBot
  - Prynt Stealer
  - PseudoManuscrypt
  - PsiX
  - PSLogger
  - PC Surveillance System
  - Pteranodon
  - PubNubRAT
  - Punkey POS
  - pupy (Windows)
  - PureCrypter
  - PureLocker
  - PureLogs Stealer
  - PurpleFox
  - PurpleWave
  - Pushdo
  - Putabmow
  - puzzlemaker
  - PvzOut
  - PwndLocker
  - pwnpos
  - PXRECVOWEIWOEI
  - win.pyfiledel
  - Pykspa
  - PyLocky
  - PyXie
  - Qaccel
  - Qadars
  - QakBot
  - QHost
  - QtBot
  - QuantLoader
  - QUARTERRIG
  - Quasar RAT
  - QuickHeal
  - QUICKMUTE
  - QUIETCANARY
  - QuietSieve
  - QuiteRAT
  - Qulab
  - QvoidStealer
  - r77
  - r980
  - Raccoon
  - Racket Downloader
  - Rad
  - Radamant
  - RadRAT
  - RagnarLocker (Windows)
  - Ragnarok
  - Raindrop
  - Rakhni
  - Rambo
  - Ramdo
  - Ramnit
  - Ramsay
  - Ranbyus
  - Ranion
  - Ranscam
  - Ransoc
  - RansomEXX (Windows)
  - Ransomlock
  - SNC
  - Rapid Ransom
  - RapidStealer
  - Rarog
  - rarstar
  - Raspberry Robin
  - Ratankba
  - RatankbaPOS
  - RATel
  - RatSnif
  - RawPOS
  - Razy
  - RC2FM
  - RCS
  - RCtrl
  - rdasrv
  - RDAT
  - ReactorBot
  - Reaver
  - RecordBreaker
  - RedAlpha
  - RedCap
  - RedCurl
  - RedEnergy Stealer
  - RedLeaves
  - RedLine Stealer
  - Redosdru
  - REDPEPPER
  - RedRum
  - REDSALT
  - REDSHAWL
  - Redyms
  - Red Alert
  - Red Gambler
  - reGeorg
  - Regin
  - RegretLocker
  - RekenSom
  - win.rekoobe
  - Rekt Loader
  - Rektware
  - RelicRace
  - RemCom
  - Remcos
  - Remexi
  - RemoteAdmin
  - RemoteControl
  - Remsec
  - Remy
  - Rerdom
  - Retadup
  - Retefe (Windows)
  - Retro
  - Revenant
  - Revenge RAT
  - ReverseRAT
  - Reveton
  - REvil (Windows)
  - RGDoor
  - Rhadamanthys
  - Rhino
  - RHttpCtrl
  - Rhysida (Windows)
  - Rietspoof
  - Rifdoor
  - Rikamanu
  - Rincux
  - Ripper ATM
  - RisePro
  - Rising Sun
  - RM3
  - RMS
  - RoarBAT
  - RobinHood
  - rock
  - Rockloader
  - Rofin
  - RogueRobinNET
  - Rokku
  - RokRAT
  - ROLLCOAST
  - RollSling
  - Rombertik
  - ROMCOM RAT
  - Romeo(Alfa,Bravo, ...)
  - Rook
  - Roopirs
  - Roopy
  - Rorschach Ransomware
  - Roseam
  - Roshtyak
  - RotorCrypt
  - Rover
  - Rovnix
  - RoyalCli
  - Royal DNS
  - Royal Ransom (Windows)
  - Rozena
  - RTM
  - RTM Locker
  - rtpos
  - Ruckguv
  - Rumish
  - Running RAT
  - RURansom
  - Rurktar
  - RustBucket (Windows)
  - Rustock
  - Ryuk
  - Ryuk Stealer
  - Sadogo
  - Saefko
  - SafeNet
  - Sagerunex
  - SAGE
  - SaiGon
  - Saint Bot
  - Saitama Backdoor
  - Sakula RAT
  - Salgorea
  - Sality
  - SamoRAT
  - SamSam
  - Sanny
  - SapphireMiner
  - SapphireStealer
  - SappyCache
  - Sarhust
  - Sasfis
  - Satacom
  - Satan
  - Satana
  - Satellite Turla
  - Sathurbot
  - ScanPOS
  - Scarabey
  - Scarab Ransomware
  - ScareCrow
  - Schneiken
  - Scieron
  - Scote
  - Scout
  - Scranos
  - ScreenCap
  - ScreenLocker
  - ScrubCrypt
  - SDBbot
  - SEADADDY
  - SeaSalt
  - SectopRAT
  - SeDll
  - Sedreco
  - Seduploader
  - seinup
  - Sekhmet
  - SelfMake Loader
  - SendSafe
  - SepSys
  - Sepulcher
  - SerialVlogger
  - Serpent Stealer
  - Serpico
  - ServHelper
  - SessionManager
  - Sfile
  - shadowhammer
  - ShadowPad
  - Shakti
  - SHAPESHIFT
  - shareip
  - Shark
  - SharpBeacon
  - SHARPKNOT
  - SharpMapExec
  - SharpStage
  - SHARPSTATS
  - ShellClient RAT
  - ShellLocker
  - Shifu
  - Shim RAT
  - SHIPSHAPE
  - Shujin
  - Shurl0ckr
  - Shylock
  - SideTwist
  - SideWalk (Windows)
  - SideWinder (Windows)
  - SiennaBlue
  - SiennaPurple
  - Sierra(Alfa,Bravo, ...)
  - SiestaGraph
  - Siggen6
  - SigLoader
  - sihost
  - Silence
  - SILENTUPLOADER
  - Silon
  - Siluhdur
  - Simda
  - SimpleFileMover
  - Sinowal
  - Sisfader
  - Skimer
  - SkinnyBoy
  - skip-2.0
  - Skipper
  - Skyplex
  - Slam
  - Slave
  - SLICKSHOES
  - Slingshot
  - Sliver
  - slnrat
  - SlothfulMedia
  - SLUB
  - smac
  - Smackdown
  - SManager
  - SmartEyes
  - SMAUG
  - SMOKEDHAM
  - SmokeLoader
  - Smominru
  - Smrss32
  - Sn0wsLogger
  - Snake
  - Snatch
  - SnatchCrypto
  - SnatchLoader
  - SNEEPY
  - Snifula
  - Snojan
  - SnowFlake Stealer
  - SNS Locker
  - Sobaken
  - Sobig
  - Socelars
  - Sockbot
  - Socks5 Systemz
  - SocksBot
  - SodaMaster
  - Solar
  - Solarbot
  - solarmarker
  - SolidBit
  - SombRAT
  - Somnia
  - Sorano
  - soraya
  - SoreFang
  - Sorgu
  - Soul
  - SOUNDBITE
  - SPACESHIP
  - Spark
  - Sparkle
  - Sparksrv
  - SparkRAT
  - SparrowDoor
  - Spartacus
  - SPECTRALVIPER
  - Spectre Rat
  - Spedear
  - SPHijacker
  - Spicy Hot Pot
  - SPIDERPIG RAT
  - Spora
  - SpyBot
  - Spyder
  - SpyEye
  - Squirrelwaffle
  - SquirtDanger
  - sRDI
  - SSHNET
  - SslMM
  - Stabuniq
  - StalinLocker
  - Stampedo
  - StarCruft
  - StarLoader
  - StarsyPound
  - StartPage
  - STASHLOG
  - StealBit
  - Stealc
  - Stealerium
  - Stealer0x3401
  - StealthWorker Go
  - Stealth Soldier
  - SteamHide
  - StegoLoader
  - Stinger
  - STONEBOAT
  - StoneDrill
  - STOP
  - Stormwind
  - STOWAWAY
  - Stration
  - STRATOFEAR
  - StrelaStealer
  - Stresspaint
  - StrifeWater RAT
  - StrikeSuit Gift
  - StrongPity
  - Stuxnet
  - Subzero
  - SUCEFUL
  - Sugar
  - SUGARDUMP
  - SUGARRUSH
  - SUNBURST
  - SunCrypt
  - SunOrcal
  - SunSeed
  - SuperBear RAT
  - SUPERNOVA
  - SuppoBox
  - surtr
  - SVCReady
  - swen
  - SwiftSlicer
  - Sword
  - sykipot
  - SynAck
  - SyncCrypt
  - SynFlooder
  - Synth Loader
  - Sys10
  - Syscon
  - SysGet
  - SysJoker (Windows)
  - SysKit
  - Sysraw Stealer
  - Sysrv-hello (Windows)
  - SysScan
  - SystemBC
  - Szribi
  - TabMsgSQL
  - taidoor
  - TAINTEDSCRIBE
  - Taleret
  - Tandfuy
  - Tapaoux
  - TargetCompany
  - Tarsip
  - Taurus Stealer
  - TClient
  - tDiscoverer
  - TDTESS
  - TeamSpy
  - TEARDROP
  - TefoSteal
  - TelAndExt
  - TelB
  - TeleBot
  - TeleDoor
  - TelegramGrabber
  - Telemiris
  - Teleport
  - TellYouThePass
  - Tempedreve
  - TempStealer
  - Terminator RAT
  - Termite
  - TerraPreter
  - TerraLoader
  - TerraRecon
  - TerraStealer
  - TerraTV
  - TeslaCrypt
  - TFlower
  - Thanatos
  - Thanatos Ransomware
  - ThinMon
  - ThreeByte
  - ThumbThief
  - ThunderX
  - Thunker
  - Tidepool
  - TigerLite
  - Tiger RAT
  - tildeb
  - Tinba
  - TinyFluff
  - TinyLoader
  - TinyMet
  - TinyNuke
  - TinyTyphon
  - TinyZbot
  - TinyTurla
  - Tiop
  - TitanStealer
  - Tmanger
  - Tofsee
  - TokyoX
  - tomiris
  - TONEDEAF
  - TONESHELL
  - Tonnerre
  - Topinambour
  - Torisma
  - TorrentLocker
  - TorLoader
  - TOUCHMOVE
  - TOUCHSHIFT
  - ToxicEye
  - TransBox
  - tRat
  - TreasureHunter
  - TrickBot
  - Trigona
  - Triton
  - Trochilus RAT
  - Troldesh
  - TroubleGrabber
  - troystealer
  - Trump Ransom
  - Tsifiri
  - TUNNELFISH
  - turian
  - Turkojan
  - TurlaRPC
  - Turla SilentMoon
  - TURNEDUP
  - TYPEFRAME
  - TypeHash
  - Typhon Stealer
  - Tyupkin
  - T-Cmd
  - T-RAT 2.0
  - UACMe
  - UDPoS
  - UFR Stealer
  - Uiwix
  - Umbral
  - UnderminerEK
  - Unidentified 001
  - Unidentified 003
  - Unidentified 006
  - Unidentified 013 (Korean)
  - Unidentified 020 (Vault7)
  - Unidentified 022 (Ransom)
  - Unidentified 023
  - Unidentified 024 (Ransomware)
  - Unidentified 025 (Clickfraud)
  - Unidentified 028
  - Unidentified 029
  - Unidentified 030 (Ransomware)
  - Unidentified 031
  - Unidentified 037
  - Unidentified 038
  - Unidentified 039
  - Unidentified 041
  - Unidentified 042
  - Unidentified 044
  - Unidentified 045
  - Unidentified 047
  - Unidentified 052
  - Unidentified 053 (Wonknu?)
  - Unidentified 057
  - Unidentified 058
  - Unidentified 066
  - Unidentified 067
  - Unidentified 068
  - Unidentified 069 (Zeus Unnamed2)
  - Unidentified 070 (Downloader)
  - Unidentified 071 (Zeus Unnamed1)
  - Unidentified 072 (Metamorfo Loader)
  - Unidentified 074 (Downloader)
  - Unidentified 075
  - Unidentified 076 (Higaisa LNK to Shellcode)
  - Unidentified 077 (Lazarus Downloader)
  - Unidentified 078 (Zebrocy Nim Loader?)
  - Unidentified 080
  - Unidentified 081 (Andariel Ransomware)
  - Unidentified 083 (AutoIT Stealer)
  - Unidentified 085
  - Unidentified 087
  - Unidentified 088 (Nim Ransomware)
  - Unidentified 091
  - Unidentified 092 (Confucius Backdoor)
  - Unidentified 093 (Sidewinder)
  - Unidentified 094
  - Unidentified 095 (Iranian Wiper)
  - Unidentified 096 (Keylogger)
  - Unidentified 097 (Polonium Keylogger)
  - Unidentified 098 (APT29 Slack Downloader)
  - Unidentified 099 (APT29 Dropbox Loader)
  - Unidentified 100 (APT-Q-12)
  - Unidentified 103 (FIN8)
  - Unidentified 104
  - Unidentified 105
  - Unidentified 106
  - Unidentified 107 (APT29)
  - Unidentified 108
  - Unidentified 109 (Lazarus?)
  - Unidentified 110 (RustyFlag)
  - Unidentified 111 (IcedID Loader)
  - Unidentified 112 (Rust-based Stealer)
  - Unlock92
  - UPAS
  - Upatre
  - Urausy
  - UrlZone
  - Uroburos (Windows)
  - USBCulprit
  - USBferry
  - Vadokrist
  - Vaggen
  - ValleyRAT
  - VALUEVAULT
  - vanillarat
  - VaporRage
  - Varenyky
  - Vawtrak
  - Veeam Dumper
  - VegaLocker
  - VEILEDSIGNAL
  - Velso
  - Vendetta
  - Venom RAT
  - VenomLNK
  - Venus Locker
  - Vermilion Strike (Windows)
  - Vermin
  - Vetta Loader
  - Vflooder
  - VHD Ransomware
  - VictoryGate
  - Vidar
  - VIGILANT CLEANER
  - virdetdoor
  - VirLock
  - VIRTUALGATE
  - Virut
  - Vizom
  - Vjw0rm
  - VM Zeus
  - Vobfus
  - Vohuk
  - Void
  - Voidoor
  - VoidRAT
  - Volgmer
  - Vovalex
  - Vreikstadi
  - VSingle
  - vSkimmer
  - Vulturi
  - Vyveva RAT
  - w32times
  - win.wabot
  - wAgentTea
  - WallyShack
  - WannaCryptor
  - WannaHusky
  - WannaRen
  - WastedLoader
  - WastedLocker
  - Waterbear
  - WaterMiner
  - WaterSpout
  - WebbyTea
  - WebC2-AdSpace
  - WebC2-Ausov
  - WebC2-Bolid
  - WebC2-Cson
  - WebC2-DIV
  - WebC2-GreenCat
  - WebC2-Head
  - WebC2-Kt3
  - WebC2-Qbp
  - WebC2-Rave
  - WebC2-Table
  - WebC2-UGX
  - WebC2-Yahoo
  - WebMonitor RAT
  - WeControl
  - WellMess
  - WeSteal
  - WhiskerSpy
  - WhisperGate
  - WhiteBird
  - WhiteBlackCrypt
  - WhiteSnake Stealer
  - WikiLoader
  - WildFire
  - WinDealer
  - WinInetLoader
  - winlog
  - WinMM
  - Winnti (Windows)
  - WinorDLL64
  - WinPot
  - WinScreeny
  - Winsloader
  - Wipbot
  - WMI Ghost
  - WndTest
  - Wonknu
  - woody
  - Woody RAT
  - Woolger
  - WorldWind
  - WORMHOLE
  - WormLocker
  - WpBruteBot
  - WSCSPL
  - Wslink
  - x4
  - X-Agent (Windows)
  - XBot POS
  - XBTL
  - xCaon
  - XData
  - XDSpy
  - XenArmor
  - Xenon Stealer
  - X-Files Stealer
  - XFSADM
  - XFSCashNCR
  - Xiangoop
  - XiaoBa
  - xmrig
  - Xorist
  - XP10
  - xPack
  - Xpan
  - XPCTRA
  - XpertRAT
  - XP PrivEsc (CVE-2014-4076)
  - XServer
  - xsPlus
  - XTunnel
  - X-Tunnel (.NET)
  - Xwo
  - XWorm
  - xxmm
  - Yahoyah
  - Yakuza
  - YamaBot
  - Yanluowang
  - YaRAT
  - Yarraq
  - Yasso
  - Yatron
  - yayih
  - Yellow Cockatoo RAT
  - Yoddos
  - YoreKey
  - YoungLotus
  - YourCyanide
  - YTStealer
  - yty
  - Yunsip
  - Z3
  - Zacinlo
  - Zebrocy
  - Zebrocy (AutoIT)
  - Zedhou
  - zenar
  - Zeoticus
  - Zeppelin
  - ZeroAccess
  - ZeroCleare
  - ZeroEvil
  - ZeroLocker
  - Zeropadypt
  - ZeroT
  - Zeus
  - ZeusAction
  - Zeus MailSniffer
  - Zeus OpenSSL
  - Zeus Sphinx
  - Zezin
  - zgRAT
  - ZhCat
  - ZhMimikatz
  - ZingoStealer
  - ZitMo
  - ZiyangRAT
  - Zloader
  - Zlob
  - ZStealer
  - Zumanek
  - ZUpdater
  - Zupdax
  - ZXShell
  - ZxxZ
  - Zyklon
Microsoft activity group
Microsoft activity group
- Microsoft Activity Group actor
Misinfosec amitt misinformation pattern
Misinfosec amitt misinformation pattern
- Misinformation Pattern
Mitre atlas attack pattern
Mitre atlas attack pattern
- MITRE ATLAS Attack Pattern
Mitre atlas course of action
Mitre atlas course of action
- MITRE ATLAS Course of Action
Mitre attack pattern
Mitre attack pattern
- Attack Pattern
Mitre course of action
Mitre course of action
- Course of Action
Mitre d3fend
Mitre d3fend
- MITRE D3FEND
Mitre data component
Mitre data component
- mitre-data-component
Mitre data source
Mitre data source
- mitre-data-source
Mitre ics assets
Mitre ics assets
- Assets
Mitre ics groups
Mitre ics groups
- Groups
Mitre ics levels
Mitre ics levels
- Levels
Mitre ics software
Mitre ics software
- Software
Mitre ics tactics
Mitre ics tactics
- Tactics
Mitre intrusion set
Mitre intrusion set
- Intrusion Set
Mitre malware
Mitre malware
- Malware
Mitre tool
Mitre tool
- mitre-tool
Nace
Nace
- NACE
Naics
Naics
- NAICS
Nice framework competency areas
Nice framework competency areas
- NICE Competency areas
Nice framework knowledges
Nice framework knowledges
- NICE Knowledges
Nice framework opm codes
Nice framework opm codes
- OPM codes in cybersecurity
Nice framework skills
Nice framework skills
- NICE Skills
Nice framework tasks
Nice framework tasks
- NICE Tasks
Nice framework work roles
Nice framework work roles
- NICE Work Roles
O365 exchange techniques
O365 exchange techniques
- o365-exchange-techniques
Online service
Online service
- online-service
Preventive measure
Preventive measure
- Preventive Measure
Producer
Producer
- Producer
Ransomware
Ransomware
- Ransomware
Rat
Rat
- RAT
Region
Region
- Regions UN M49
Rsit
Rsit
- rsit
Sector
Sector
- Sector
Sigma rules
Sigma rules
- Sigma-Rules
Social dark patterns
Social dark patterns
- Dark Patterns
Sod matrix
Sod matrix
- SoD Matrix
Stealer
Stealer
- Stealer
Surveillance vendor
Surveillance vendor
- Surveillance Vendor
Target information
Target information
- Target Information
Tds
Tds
- TDS
Tea matrix
Tea matrix
- Tea Matrix
Threat actor
Threat actor
- Threat Actor
Tidal campaigns
Tidal campaigns
- Tidal Campaigns
Tidal groups
Tidal groups
- Tidal Groups
Tidal references
Tidal references
- Tidal References
Tidal software
Tidal software
- Tidal Software
Tidal tactic
Tidal tactic
- Tidal Tactic
Tidal technique
Tidal technique
- Tidal Technique
Tmss
Tmss
- Threat Matrix for storage services
Tool
Tool
- Tool
Uavs
Uavs
- UAVs/UCAVs
Ukhsa culture collections
Ukhsa culture collections
- UKHSA Culture Collections

Table of contents