Changed | Name |
Tools |
| 3102 RAT |
| 3PARA RAT |
| 3Rat Client |
| 404-Input-shell web shell |
| 4H RAT, 4h_rat |
| 888 RAT |
| 9002 RAT, McRAT, MdmBot, Homux, Hydraq, HidraQ, HOMEUNIX, Aurora, Roarur |
| ActionRAT |
| ActionSpy, AxeSpy |
| adbupd |
| Adwind, Adwind RAT, Frutas, jFrutas, UnReCoM, Alien Spy, AlienSpy, JSocket, Sockrat, jBiFrost, JBifrost RAT, Unknown RAT, jConnectPro RAT, Unrecom, Trojan.Maljava |
| Adzok, Invisible Remote Administrator |
| Agent.BTZ, Minit, Chinch, Sun rootkit |
| Agent.DNE |
| Agent Racoon |
| agfSpy |
| AIRBREAK, Orz |
| Albaniiutas, BlueTraveller |
| Allakore RAT, AllaKore |
| Alma Communicator |
| Amavaldo |
| Anchor, Anchor_DNS |
| Andaratm |
| AndoServer |
| Android RAT |
| AndroRAT |
| Anel, lena, UpperCut |
| Antak |
| AntSword |
| Anubis, BankBot, Go_P00t, android.bankbot, android.bankspy |
| AnubisSpy |
| AnvilEcho |
| AnyDesk |
| APERETIF |
| Apocalipto |
| AppleSeed, JamBog |
| Ares |
| AresRAT |
| Aria-body, AR |
| AridSpy |
| Aryan |
| Asacub, Trojan-SMS.AndroidOS.Smaps |
| ASPXSpy, ASPXTool |
| Asruex |
| AsyncRAT |
| ATI-Agent |
| AtlasAgent |
| ATMDtrack |
| ATMii |
| ATMitch |
| AuditCred, ROptimizer |
| AUMLIB, yayih, bbsinfo, mswab, Graftor |
| Auriga, Riodrv |
| AutoIt backdoor |
| Ave Maria, AVE_MARIA, AveMariaRAT, avemaria |
| Aversome infector |
| Babar, SNOWBALL |
| BabyShark, LATEOP |
| BackConfig |
| Backdoor Batel, Batel |
| Backoff, Backoff POS |
| Backspace, Lecna, ZRLnk |
| BadBazaar |
| BADCALL |
| BADFLICK |
| BadHatch |
| BADNEWS, JakyllHyde |
| BadPatch, WelcomeChat |
| BADSIGNAL |
| BADSOLAR |
| Bahamut |
| Bandook, Bandok |
| bangat |
| Banjori, BankPatch, BackPatcher, MultiBanker 2 |
| Bankshot, COPPERHEDGE, Trojan Manuscript, FoggyBrass |
| BarbWire |
| Barlaiy, POISONPLUG |
| BASICSTAR |
| Bateleur |
| BazarBackdoor, BazarLoader, BEERBOT, BazarCall, KEGTAP, Team9Backdoor, bazaloader |
| BBSRAT |
| BEACON |
| beendoor |
| Behinder |
| BELLHOP |
| Bemstour |
| BendyBear, Waterbear, Deuterbear |
| Benghazi.exe |
| BetaBot, Neurevt |
| Bezigate |
| BH_A006 |
| BIASBOAT |
| BIFROST, elf.bifrose |
| Bioazih |
| BIOPASS RAT, BIOPASS |
| BISCUIT, zxdosml |
| Bisonal, Korlia |
| BISTROMATH |
| BitRAT |
| BitterRAT, Bitter RAT |
| BITTERSWEET |
| Bizarro, Bizzaro |
| BlackCoffee, PNGRAT, ZoxPNG, gresim |
| BlackEnergy, Black Energy |
| Black Lambert |
| BlackMould |
| BlackNET RAT |
| BlackRAT, BlackRemote |
| BlackRock, AmpleBot |
| BlackSmith |
| BlankBot |
| BLINDINGCAN, DRATzarus RAT, AIRDRY, ZetaNile |
| BlotchyQuasar |
| BLUEAGAVE |
| BLUEBEAM |
| BlueCore |
| BLUELIGHT |
| BlueShell |
| Bluether, CAPGELD |
| BOLDMOVE |
| BONDUPDATER, Poison Frog, Glimpse |
| Bookcode |
| Bookworm |
| Bouncer |
| Bozok, Bozok RAT |
| Brambul, SierraBravo, SORRYBRUTE |
| Brave Prince |
| BreachRAT |
| Briba |
| BrittleBush |
| Brute Ratel, Brute Ratel C4 |
| BrutPOS |
| BS2005 |
| BUBBLEWRAP, Backdoor.APT.FakeWinHTTPHelper |
| BUFFETLINE |
| BugSleep |
| Buhtrap, Ratopak |
| BumbleBee, COLDTRAIN, SHELLSTING, Shindig |
| Bvp47 |
| Byeby |
| ByPassGodzilla |
| C0d0so0 |
| Cadelspy, Cadelle, WinSpy |
| CALENDAR |
| callCam |
| CallMe |
| Calypso RAT |
| Cannon |
| CapraRAT |
| Capriccio RAT |
| Carbanak, Anunak, Sekur, Sekur RAT |
| CarbonSteal |
| Cardinal RAT |
| Careto, Mask, Appetite |
| CASHY200 |
| CASTLETAP |
| Catchamas |
| Caterpillar |
| CDorked, CDorked.A |
| CenterPOS, Cerebrus |
| Cerberus |
| CetaRAT |
| CHAIRSMACK |
| CHAVECLOAK |
| ChChes, HAYMAKER, Ham Backdoor, Scorpion |
| CheeseTray, CROWDEDFLOUNDER |
| CHERRYSPY |
| China Chopper, CHINACHOPPER, SinoChopper |
| Chinoxy |
| Chrommme |
| Cinobi |
| CLAMBLING, Clambling |
| CLNTEND |
| CLOSEWATCH |
| CloudDuke, Cloud Duke, MiniDionis, CloudLook |
| CLOUDSTATS |
| CMD365 |
| CMDEmber |
| CmdSQL |
| COATHANGER |
| Cobalt Strike, CobaltStrike, Agentemis, BEACON, cobeacon |
| Cobra Carbon System, Carbon, Pfinet |
| CollectionRAT |
| Combos |
| Comfoo, Comfoo RAT |
| CommonMagic |
| Comnie |
| COMpfun, Reductor RAT |
| ComRAT |
| Concealment Troy, concealment_troy |
| Confucius, ChatSpy |
| Contopee, WHITEOUT |
| CookieBag, TROJAN.COOKIES |
| CookieTime |
| Corentry, Fluxwire |
| CosmicDuke, TinyBaron, BotgenStudios, NemesisGemina |
| Cotx RAT |
| CoughingDown |
| CozyDuke, CozyCar, CozyBear, Cozer, EuroAPT |
| CREDRIVER |
| CreepyDrive |
| CreepySnail |
| Crimson RAT, Crimson, SEEDOOR, Scarimson, MSIL, MSIL/Crimson |
| CrossC2 |
| CrossRAT, Trupto |
| CrossWalk, Motnug, ProxIP, TOMMYGUN |
| Crutch |
| CsExt |
| Cuegoe |
| Cyan Lambert |
| CyberGate RAT, CyberGate, Rebhip |
| Cyclops Blink, CyclopsBlink |
| Dacls RAT, Dacls |
| DADJOKE |
| Dadstache |
| Dagger Three |
| Dairy |
| DanBot |
| Danfuan |
| DarkComet, DarkKomet, Fynloski, FYNLOS, klovbot, Krademok, Breut |
| DarkCrystal RAT, DCRat |
| DarkHotel |
| DarkMe |
| DarkPulsar |
| DarkRAT |
| Dark Tequila, DarkTequila |
| DarkVNC |
| Daserf, Muirim, Nioupale |
| Datper |
| DBoxAgent |
| DDKONG |
| Deadglyph |
| DeepCreep |
| Deed RAT |
| DELPHSTATS |
| DeltaCharlie |
| Demodex |
| Dendroid |
| DeputyDog, Fexel |
| Derusbi, PHOTO |
| Desert Scorpion |
| DetaRAT |
| Dexbia, CONIME |
| Dexter, LusyPOS, StarDust |
| dfrgntfs5.sqt |
| DILLJUICE, FYAnti |
| Dino |
| DinodasRAT, XDealer |
| DLRAT |
| DMSniff |
| dmsSpy |
| dneSpy |
| DNSpionage, Agent Drable, AgentDrable |
| DNSRat, DNSbot |
| DOGCALL |
| Dolphin |
| DoorMe |
| DOPLUGS |
| Doraemon |
| Dorshel |
| DoubleAgent |
| DoubleT |
| Dracarys |
| DragonEgg, LightSpy |
| DRIFTPIN, Toshliph, Spy.Agent.ORM |
| Dripion, Masson |
| DroidJack |
| DropBook |
| Drovorub |
| Dtrack, TroyRAT, Preft |
| Duqu, Tilded |
| DustySky, NeD Worm |
| Duuzer, Escad |
| Dyre, Dyreza, Dyzap, Dyranges |
| EAGLEDOOR |
| Ebury |
| EHDevel |
| Elirks |
| Elise, BKDR_ESILE, EVILNEST, Page |
| ELMER, Elmost |
| Emdivi, Newsripper |
| Emissary |
| EmpireDNSAgent, EDA |
| EmpireProject, Empire, EmPyre, PowerShell Empire |
| Epic, Epic Turla, Tavdig, Wipbot, WorldCupSec, TadjMakhal |
| EpicenterRAT |
| EQUATIONDRUG, EQUESTRE |
| EQUATIONLASER |
| ERMAC |
| ESRDE |
| EtherealGh0st |
| ETUMBOT, RIPTIDE, HIGHTIDE, Exploz, Specfix |
| EvilBunny |
| EvilGnome |
| EvilGrab RAT, EvilGrab, Vidgrab, Wmonder, BKDR_HGDER, BKDR_EVILOGE, BKDR_NVICM |
| Evilnum, EVILNUM, Marvel |
| Exaramel |
| Excalibur, Sabresac, Saber |
| ExileRAT, Exile RAT |
| Explosive |
| EYE |
| EYService |
| FakeM, FakeM RAT, Terminator RAT |
| FakeTC |
| FALLCHILL, FallChill RAT |
| FalseFont |
| Farseer |
| FastPOS |
| FatDuke |
| Felismus |
| Felixroot, GreyEnergy mini |
| Fimlis |
| FindPOS, PoSeidon |
| FinFisher, FinFisher RAT, FinSpy |
| Flame, Flamer, sKyWIper, Skywiper |
| Flapjack |
| FlawedAmmyy, AmmyyRAT |
| FlawedGrace, GraceWire |
| FleetDeck |
| FlipCreep |
| FlokiBot |
| FlowCloud |
| FlowerPippi |
| FluffyGh0st |
| FlyingDutchman |
| Fobber |
| FoggyWeb |
| Formbook, win.xloader |
| FormerFirstRAT, FF-RAT, ffrat |
| FoundCore, RainyDay |
| FRAUDROP |
| FrozenCell |
| FruityC2 |
| FunnyDream |
| FunnySwitch, RouterGod |
| FurBall |
| Gamaredon |
| Gazer, WhiteBear |
| Gcat |
| Gelsevirine |
| GeminiDuke |
| Gh0stnet, Ghostnet, Remosh |
| Gh0st RAT, Ghost RAT, AngryRebel, Farfli, PCRat, Moudour, Mydoor |
| Gh0stTimes |
| Ghambar |
| Gh0stCringe RAT |
| GIFTEDVISITOR |
| Gigabud, Gigabud RAT |
| GIMMICK |
| GlanceLove, WinkChat |
| GLASSTOKEN |
| GLOOXMAIL, Trojan.GTALK |
| GnatSpy |
| GoBot2 |
| Godlua |
| GORBLE |
| GOLDBACKDOOR |
| Gold Dragon, GoldDragon, Lovexxx |
| GoldenEagle |
| GoldenRAT |
| GoldFinder |
| GoldMax, SUNSHUTTLE |
| GollumApp |
| Goodor, Fuerboos |
| GoogleDrive RAT |
| Gootkit, Gootloader, Xswkit, talalpek, Waldek |
| Gopuram |
| Gorynych, Gorynch, Diamond Fox, DiamondFox, Crystal |
| GotoHTTP |
| Graphican |
| Graphiron |
| Graphite |
| Graphon |
| GraphSteel, Elephant Client |
| GravityRAT |
| GRAYFISH |
| Gray Lambert |
| GREENCAT |
| GreezeBackdoor |
| GrewApacha |
| GreyEnergy |
| GRILLMARK, Hellsing Backdoor |
| GrimPlant, Elephant Implant |
| GUP Proxy Tool |
| Hackfase, Hacksfase |
| HALFBAKED, VB Flash |
| HALFSHELL |
| HammerDuke, HAMMERTOSS, NetDuke, tDiscoverer |
| Hannotog |
| HARDRAIN |
| Harpoon, Garpun |
| Havex RAT, Havex, Oldrea, Backdoor.Oldrea, Fertger, PEACEPIPE |
| Hawup, Hawup RAT |
| hcdLoader |
| HDoor, Custom HDoor |
| HDRoot, HDD Rootkit |
| Headlace |
| Helauto |
| Helminth |
| Heriplor |
| HiddenLotus |
| HighNoon |
| HiKit |
| Hisoka |
| HKDOOR |
| Hodur |
| Hornbill |
| HOTCROISSANT, HotCroissant |
| HTTPBrowser, HttpBrowser RAT, HttpDump, TokenControl, Token Control |
| httpclient |
| Http Dr0pper, httpdr0pper, httpdropper |
| HTTPSnoop |
| HTTP Troy, http_troy |
| Hupigon, Hupigon RAT, BKDR_HUPIGON, MFC Huner |
| Hurix |
| H-Worm, H-Worm RAT, Houdini RAT, Houdini, Hworm, Njw0rm, Iniduoh, Jenxcus, Kognito, WSHRAT, dinihou, dunihi |
| HyperBro |
| HyperStack, GoldenSky, SilentMoon, Turla SilentMoon, BigBoss, Cacao |
| IcedCoffee |
| Icefog, Fucobha |
| IHEATE |
| IMAPLoader |
| Imecab |
| Imminent Monitor RAT, Imminent Monitor |
| Inception |
| Industroyer, Crash, CrashOverride, CRASHOVERRIDE, Win32/Industroyer |
| Industroyer2 |
| InsidiousGh0st |
| InvisiMole |
| IPsec Helper |
| IRAFAU |
| IronWind |
| ISMAgent |
| ISMDoor |
| IsSpace, NfLog RAT |
| IXESHE |
| JackalControl |
| JackPOS |
| JadeRAT |
| Janeleiro |
| Janicab |
| Javafog |
| JESTBOT |
| JhoneRAT |
| JHUHUGIT, Seduploader, JKEYSKW, Sednit, Downrage, GAMEFISH, carberplike, SofacyCarberp, Carberp, Trojan.Sofacy |
| JLORAT |
| Joanap, SierraJuliett-MikeOne, SierraJuliett-MikeTwo |
| JPIN |
| JRat, Jacksbot |
| JripBot, Jiripbot |
| JS Flash |
| jsp File browser |
| JSPRAT |
| JSPSPY |
| JSSLoader, FOWLGAZE |
| JuicyPotato |
| JuicyPotatoNG |
| KamiKakaBot |
| KANDYKORN |
| KARAE |
| Karagany, Karagny, Trojan.Karagany, xFrost |
| Karba, Trojan.Win32.Karba.e |
| Karkoff, MailDropper, DropperBackdoor, CACTUSPIPE, OILYFACE |
| KasperAgent |
| Kazuar |
| Ketrican |
| Ketrum |
| KevDroid |
| KeyBoy, TSSL |
| KEYMARBLE |
| KEYPLUG, ELFSHELF |
| KGH_SPY, KGH Spyware Suite |
| KHRAT |
| Kikothac |
| Killua |
| KimJongRAT |
| KingOfHearts |
| Koadic |
| Komplex |
| KOMPROGO, Splinter RAT |
| Konni |
| KopiLuwak |
| Krasue |
| KsRemote |
| KTLVdoor |
| Kurton |
| Kwampirs |
| Lastacloud |
| LastConn |
| Lazarus, HIDDEN COBRA RAT/Worm |
| Leash |
| LEMONSTICK |
| Leo RAT |
| LEOUNCIA, shoco |
| Licat, Murofet |
| LIFEBOAT |
| LIGHTBOLT |
| LightlessCan |
| lightSpy |
| LIGHTWIRE |
| Lilith RAT, Lilith |
| LimeRAT |
| Linfo |
| LiteDuke |
| Lizar, Tirion, DICELOADER |
| LOADGRIP |
| Loda, Loda RAT, LodaRAT, Nymeria |
| LODEINFO |
| logon.dll |
| logsupport.dll |
| LoJax |
| LokiBot, Loki, LokiPWS, Loki.Rat, ForeIT |
| LONGRUN |
| LOWBALL |
| Lowkey, PortReuse |
| LuaDream, DreamLand |
| Lucky Cat, LuckyCat |
| Luminosity RAT, LuminosityLink |
| Machete, El Machete |
| Macma, MacMa, CDDS, DazzleSpy |
| Madness PRO DDoS |
| Magenta Lambert |
| MagicRAT |
| MagicWeb |
| MAILSLOT |
| MajikPOS |
| ManItsMe |
| MargulasRAT |
| MarkiRAT |
| Marlin |
| MATA |
| Matryoshka RAT, Matryoshka |
| Md_client |
| MechaFlounder |
| MediaPl, EYEGLASS |
| MegaCreep |
| Mekotio, Metamorfo, Casbaneiro |
| Merdoor |
| METALJACK, denesRAT |
| Metel |
| MgBot, BLame, Mgmbot, POCOSTICK |
| MiamiBeach |
| Microcin, Mikroceen |
| Milan, James |
| Milum |
| MINEBRIDGE, MINEBRIDGE RAT, GazGolder |
| MiniASP |
| MiniDuke |
| MiniWebCmdShell |
| MirageFox |
| MischiefTut |
| Misdat |
| MiS-Type |
| Mivast |
| MIXLABEL |
| MMRat |
| MobileOrder |
| ModPipe |
| ModPOS, straxbot |
| MoleNet |
| Mongall |
| MoonBounce |
| MoonPeak |
| MOONSHINE |
| MoonWalk |
| MoonWind RAT, MoonWind |
| MOPSLED |
| More_eggs, SpicyOmelette, Terra Loader, SKID |
| Moriya |
| Mosquito |
| MPKBot, MPK |
| MQsTTang, QMAGENT |
| MSUpdater |
| MuddyC2Go |
| Mudwater |
| Munchkin |
| MY24 |
| MyDogs |
| MysterySnail RAT, MysterySnail |
| N1stAgent |
| NachoCheese, NACHOCHEESE, Cyruslish, TWOPENCE, VIVACIOUSGIFT |
| Naid, Trojan.Naid, Mdmbot.E, AGENT.GUNZ, AGENT.AQUP.DROPPER, AGENT.BMZA, MCRAT.A, AGENT.ABQMR |
| Naikon, XsFunction, Sacto |
| NanHaiShu |
| NanoCore RAT, NanoCore, Nancrat, Zurten, Atros2.CKPN |
| Nautilus |
| NavRAT, JinhoSpy |
| NCAT |
| NDiskMonitor |
| Nebulae |
| Neptun |
| Nerex |
| NestEgg |
| netcat |
| NetEagle, ScoutEagle, scout, Neteagle_Scout, norton |
| Netero |
| NetHelp Infostealer, NetHelp Striker |
| NetSupport Manager, NetSupport Manager RAT, NetSupportManager RAT, NetSupport RAT, NetSupport |
| NetTraveler, TravNet, Netfile |
| NETVulture |
| NetWire RC, NetWire RAT, NetWired RC, NetWire, NetWeird, Recam |
| Neuron |
| Neutrino, Neutrino Bot, Neutrino Exploit Kit, Kasidet |
| NewCore RAT |
| NewCT2 |
| NewPass |
| NewsReels |
| NFlog |
| Ngrok |
| Nidiran, Backdoor.Nidiran |
| Nightdoor, NetMM, Suzafk |
| NimbleMamba |
| Nimcy |
| NineBlog |
| NineRAT |
| Ninja |
| njRAT, Bladabindi, Jorik |
| Nokki |
| NOKNOK |
| NOOPDOOR |
| NPS |
| NSPX30 |
| NukeSped |
| Numando |
| ObliqueRAT, Oblique RAT |
| OceanLotus, OSX_OCEANLOTUS.D, Backdoor.MacOS.OCEANLOTUS.F |
| OCEANMAP |
| Oceansalt |
| Octopus |
| OddJob |
| Odinaff |
| Okrum |
| OKSOLO |
| OopsIE |
| OpGhoul |
| oRAT |
| Orcus RAT, Orcus, Schnorchel |
| Outlook Backdoor, FACADE |
| OwaAuth, luckyowa |
| P0wnyshell, Ponyshell, Pownyshell |
| P8RAT, GreetCake |
| PACMAN |
| Paladin RAT, Paladin |
| Pantegana |
| PapaCreep |
| Paperbug |
| Parallax RAT, ParallaxRAT, Parallax |
| P.A.S., PAS, Fobushell |
| Pasam |
| PCClient |
| PCShare |
| PEBBLEDASH |
| Pegasus, Q Suite, Chrysaor, JigglyPuff |
| Penquin Turla |
| Peppy RAT, Peppy Trojan |
| PGoShell |
| PhanDoor |
| PhantomLance, PWNDROID1, Android.Backdoor.736.origin |
| PhantomNet, SManager |
| PhonyC2 |
| PHOREAL, Rizzo |
| PhpSpy |
| Pierogi |
| PikoloRAT |
| PINEFLOWER, CORRUPT KITTEN |
| PingPull |
| PipeMon |
| PipeSnoop |
| Pirpi, SHOTPUT, Badey, EXL, CookieCutter, Backdoor.APT.CookieCutter |
| Pisloader, Roseam |
| Pitty, PittyTiger RAT |
| PLAINTEE |
| PLANKWALK |
| PLEAD, DRAWDOWN, GOODTIMES, Linopid, TSCookie |
| PluginPhantom |
| PlugX, Destroy RAT, DestroyRAT, Korplug, Sogu, Kaba, Xamtrav, Agent.dhwf, RedDelta, TIGERPLUG, Thoper, TVT |
| PlugY |
| pngdowner |
| PoisonCarp, INSOMNIA |
| Poison Ivy, pivy, poisonivy, Gen:Trojan.Heur.PT, Darkmoon, Chymine, SPIVY |
| Poldat, Zlib, KABOB |
| PolyglotDuke |
| PondRAT |
| POOLRAT, SIMPLESEA |
| POORAIM, Backdoor.APT.POORAIM |
| PoshC2 |
| POSHSPY |
| PoSlurp, PUNCHTRACK, PSVC |
| POTROAST |
| PowerBand |
| PowerBrace |
| PowerDuke |
| PowerExchange |
| PowerLess Backdoor |
| PowerMagic |
| Powermud |
| PowerPepper |
| POWERPLANT, KillACK |
| PowerRatankba, QUICKRIDE.POWER |
| PowerShell RAT |
| PowerShellRunner-based RPC backdoor, PowerShellRunner |
| Powersing |
| POWERSOURCE |
| PowerSploit |
| PowerStallion |
| POWERSTAR, CharmPower, GorjolEcho |
| POWERSTATS, Valyria |
| POWERTON |
| PowerTrick |
| PowHeartBeat |
| POWRUNER |
| POWSSHNET |
| PRB-Backdoor, prb_backdoor |
| Predator, Lycantrox |
| Prikormka |
| Pro POS |
| Protux |
| Proxysvc |
| PseudoManuscrypt |
| PsiXBot, PsiX |
| PSLogger, ECCENTRICBANDWAGON |
| Psylo |
| Pteranodon, Pterodo |
| PubFantacy |
| Pulseway |
| PunchBuggy, ShellTea, Powersniff |
| PupyRAT, Pupy, pupy |
| Purple Lambert |
| PVZ-In |
| PVZ-Out, PvzOut |
| Pyark |
| PyFlash |
| Pylot, Travle |
| PyMICROPSIA |
| PyVil RAT, PyVil |
| PyXie, PyXie RAT |
| Qadars |
| QakBot, QuakBot, QuackBot, Qbot, PinkSlip, Pinkslipbot, Oakboat |
| QCRat |
| QUADAGENT |
| QuarkBandit |
| QuasarRAT, Quasar RAT, CinaRAT, Yggdrasil |
| QueenOfClubs, SlothfulMedia |
| QueenOfHearts |
| QUEUESEED, IcyWell, Kapeka |
| QUIETEXIT |
| QuiteRAT, Acres |
| RADIOSTAR |
| Ragnatela, Ragnatela RAT |
| RAINDROP |
| Rambo, brebsd |
| Ramsay |
| Rana |
| Ranbyus |
| RARSTONE |
| Raspberry Robin, RaspberryRobin, LINK_MSIEXEC, QNAP-Worm |
| Ratankba, Ratabanka, QUICKRIDE |
| RatankbaPOS, RatabankaPOS |
| RATel |
| RatSnif |
| RawPOS, FIENDCRY, DUEBREW, DRIFTWOOD |
| RCSession |
| RCS Galileo |
| RC SHELL |
| RDAT, GREYSTUFF |
| RDFSNIFFER |
| RDP, Remote Desktop Protocol |
| RDPWrap |
| ReconModule |
| RedAlpha |
| RedCore |
| redis-rogue-getshell |
| RedLeaves, BUGJUICE |
| RedLine, RedLine Stealer |
| RedPepper, Adupib |
| RedSalt, Dipsind |
| RedXOR |
| RegDuke |
| reGeorg |
| Regin, Prax, WarriorPride |
| Remcom, RemoteCommandExecution |
| RemcosRAT, Remcos, Remvio, Socmer |
| Remexi, CACHEMONEY |
| remote-access-c3 |
| Remote CMD/PowerShell terminal |
| Remote Control System, RCS, Crisis |
| Remsec, Backdoor.Remsec, ProjectSauron |
| RemShell |
| Remy, Remy RAT, WINDSHIELD |
| REPTILE |
| Reshell |
| Retefe (Android) |
| Retro |
| RevengeRAT, Revenge RAT, Revenge, Revetrat |
| ReverseRAT |
| ReZer0 |
| RGDoor |
| Rifdoor |
| RIFLESPINE |
| Rising Sun |
| RMS, Remote Manipulator System, Gussdoor, RuRAT |
| ROCK, yellowalbatross |
| RocketMan |
| RogueRobin, RogueRobinNET |
| RotBot |
| RokRAT |
| Roland, Roland RAT |
| ROMCOM RAT, ROMCOM |
| Romeos, RomeoCore, Romeo-CoreOne, R-C1 |
| RomeoAlfa, AlphaNC |
| RomeoBravo, BravoNC |
| RomeoCharlie |
| RomeoDelta, DeltaNC |
| RomeoEcho |
| RomeoFoxtrot |
| RomeoGolf |
| RomeoHotel |
| RomeoMike |
| RomeoNovember |
| RomeoWhiskey, Winsec |
| RottenPotato |
| RoyalCli |
| RoyalDNS, Royal DNS |
| RTM, RTM Banker, Redaman |
| RtPOS |
| RunningRAT, Running RAT, running_rat |
| RustBucket |
| RustDesk |
| RustDown |
| Safe |
| Sagerunex |
| Saitama, Saitama Backdoor, AMATIAS |
| Sakabota |
| Sakula RAT, Sakula, Sakurel, VIPER |
| Salgorea, BadCake |
| Samurai |
| SandroRAT |
| Sardonic |
| Satellite Turla |
| Scieron |
| Scotch |
| Scote |
| ScreenConnect, ConnectWise |
| sctrls |
| SDBbot |
| SeaDuke, SeaDaddy, SeaDesk, SeaDask |
| Seasalt |
| SEAWEED |
| Sedreco, AZZY, EVILTOSS, ADVSTORESHELL, NETUI |
| Sepulcher |
| Serveo |
| ServHelper |
| SessionManager |
| ShadowHammer, DAYJOB |
| ShadowNet |
| ShadowPad Winnti, POISONPLUG.SHADOW, XShellGhost |
| ShadyRAT |
| Shark |
| SharpEfsPotato |
| SHARPEXT |
| SharpJSHandler |
| SharpStage |
| SHARPSTATS |
| SharPyShell |
| SheepRAT |
| ShimRAT, Shim RAT |
| Shootback |
| SHUTTERSPEED |
| Sibot |
| SIDESHOW |
| SideTwist |
| SideWalk, ScrambleCross |
| Silence, Silence.Downloader, TrueBot |
| SilentGh0st |
| Silent Night |
| SilkBean |
| SilverHawk |
| Silver Lambert |
| SimplexTea, SimpleTea |
| Sinowal, Anserin, Mebroot, Quarian, Theola, Torpig |
| Sisfader, Sisfader RAT |
| Sisron |
| SkeletonKeyInjector |
| SkinnyBoy |
| Skip-2.0 |
| Skipper, Kotel |
| SLAPSTICK |
| sLoad, StarsLord |
| SLICKSHOES |
| SLOWDRIFT |
| SLOWROLL |
| SLRat |
| SLUB |
| SmsSpy |
| Sneepy, ByeByeShell |
| SNUGRIDE |
| Snugy |
| SocksBot, BIRDDOG, Nadrac |
| SodaMaster, DelfsCake, dfls, DARKTOWN, HEAVYPOT |
| SodomMain, SodomMain RAT |
| Sojax |
| SombRAT |
| Sorgu |
| SOUNDBITE, Denis |
| S.O.V.A. |
| Spark |
| SparkRAT |
| SparrowDoor, FamousSparrow |
| Speculoos |
| Spedear |
| SPICA |
| Spindest, Backdoor.Apocalipto |
| SPINNER |
| Splashtop |
| Sponsor |
| SprySOCKS |
| SpyC23 |
| Spyder |
| SpyMax |
| SpyNote RAT, SpyNote, CypherRat |
| SpyWaller |
| sqllauncher.dll |
| SQLRAT |
| SslMM |
| SSLove RAT |
| StarsyPound |
| StealthFalcon |
| Stealth Mango |
| StickyFingers, QUICKBALL |
| StreamEx |
| StrifeWater, StrifeWater RAT |
| StrongPity |
| StrongPity2 |
| StrongPity3 |
| Stubbedoor |
| S-Type |
| SUBTLE-PAWS |
| SunBird |
| SUNBURST, Solorigate |
| SUPERNOVA |
| SVCMONDR |
| SWEARJAR |
| SWEETCANDLE |
| SweetSpecter |
| Sword |
| Sword2033 |
| Sys10 |
| Syscon, SYSCON, Sanny |
| SystemBC, Coroxy, DroxiDat |
| SysGet, HelloBridge |
| SysJoker |
| SysKit, IvizTech, MANGOPUNCH |
| Sysmain |
| SysUpdate, FOCUSFJORD, HyperSSL, Soldier |
| TabMsgSQL, LETSGO |
| TacticalRMM |
| Taidoor, simbot |
| Tailscale |
| TAINTEDSCRIBE |
| TAMECAT |
| Tapaoux |
| Tarsip |
| TDTESS |
| TeaBot, Anatsa, Toddler, ReBot |
| TeamSpy, TVSpy, TVRAT, SpY-Agent, TeamViewerENT |
| TeamViewer |
| TechnoCreep |
| TeleBot |
| TeleDoor |
| Telemiris |
| TelePowerBot |
| Tempting Cedar Spyware, TemptingCedar Spyware |
| TERA |
| Termite |
| TerraTV, Taurus Loader TeamViewer Module |
| The CloudSorcerer |
| THINCRUST |
| THOR |
| ThreatNeedle, DRATzarus |
| THREEBYTE |
| Tickler |
| TidePool |
| TigerRAT, Tiger RAT |
| TightVNC |
| TinyNode |
| TinyNote |
| TinyNuke, NukeBot, Nuclear Bot, MicroBankingTrojan, Xbot |
| TinyPOS |
| TinyPosh |
| Tiny SHell, tsh |
| TinyTurla |
| TinyTurla-NG, TinyTurla Next Generation, TTNG |
| TINYTYPHON |
| TinyZBot |
| Titan |
| Titanium |
| TManger, LuckyBack |
| TODDLERSHARK |
| Tofu Backdoor |
| TOITOIN |
| Tomiris |
| TONEDEAF |
| TONEDEAF 2.0 |
| TONESHELL |
| Tonnerre |
| Topinambour |
| Torn RAT |
| TrailBlazer |
| TranslucentGh0st |
| TriangleDB |
| TrickBot, Trickster, The Trick, TheTrick, Totbrick, TrickLoader, TSPY_TRICKLOAD |
| TRIPLEFANTASY |
| Triton, TRITON, Trisis, TRISIS, HatMan |
| TriFive |
| Trochilus RAT |
| Troy |
| TTCalc |
| TunnelSpecter |
| Tunnus, QUIETCANARY, Kapushka |
| Turian |
| TurlaChopper |
| TURNEDUP, Notestuk |
| TwoFace, Minion, HighShell, HyperShell, SEASHARPEE |
| UltraVNC |
| UNITEDRAKE |
| Unknown Logger |
| updater.mod |
| UpDocX |
| Uroburos, Urouros, Turla, Snake |
| USBferry |
| USBWorm |
| Vadokrist |
| Valak, Valek |
| ValeforBeta |
| VAMP, android.micropsia |
| Vasport |
| VBREVSHELL |
| VEILEDSIGNAL |
| VeilShell |
| VELVETSTING |
| VenomRAT |
| ViceLeaker, Triout |
| VIDEOKILLER |
| VileRAT |
| VINETHORN |
| Violet Lambert |
| ViperRAT, Viper RAT |
| VIRTUALPIE |
| VIRTUALPITA |
| VIRTUALSHINE |
| Vizom |
| Vjw0rm, Vengeance Justice Worm |
| VNC, Virtual Network Computing |
| Voice Massege.apk |
| Voldemort |
| Volgmer, Manuscrypt |
| VolatileVenom |
| VPNFilter |
| VSingle |
| vSkimmer |
| Vyveva |
| Waizsar RAT |
| WARP |
| Warzone RAT, Warzone |
| WastedLoader |
| WaterSpout |
| WebC2, WebC2-AdSpace, WebC2-Ausov, WebC2-Bolid, WebC2-Cson, WebC2-DIV, WebC2-GreenCat, WebC2-Head, WebC2-Kt3, WebC2-Qbp, WebC2-Rave, WebC2-Table, WebC2-UGX, WebC2-Yahoo |
| Weevly |
| WellMail |
| WellMess, elf.wellmess |
| WhiskerSpy |
| Whitebird |
| White Lambert |
| Wiarp |
| WindTail |
| WINELOADER |
| WINERACK |
| Wingbird |
| WinMM |
| Winnti, BleDoor, RbDoor, RibDoor |
| WinorDLL64 |
| Winos |
| WINTERLOVE |
| WispRider |
| WIREFIRE |
| WMI Ghost, Wimmie, Syndicasec |
| WndTest |
| WolfRAT, W1_RAT |
| WSCSPL |
| WSO, Webshell by Orb |
| WyrmSpy, AndroidControl |
| X-Agent, Xagent, Popr-d30, SPLM, CHOPSTICK, fysbis, Backdoor.SofacyX, webhp |
| XBOW |
| xDll |
| XDOOR, X-Door |
| XDMonitor |
| xPack, NERAPACK |
| xRAT |
| XSLCmd |
| xsPlus, xsControl, nokian |
| XtremeRAT, Xtreme RAT, ExtRat |
| Yahoyah, W32/Seeav |
| YamaBot, Kaos |
| Yort |
| yty, Jaca |
| Zanubis |
| Zebrocy, Zekapab |
| ZeGhost, BackDoor-FBZT!52D84425CDF2, Trojan.Win32.Staser.ytq, Win32/Zegost.BW |
| ZIPLINE |
| ZitMo, ZeuS-in-the-Mobile |
| ZooPark |
| ZoxRPC, Zox, ZoxPNG, Gresim |
| XPCTRA, Expectra |
| Z*Stealer, ZStealer |
| Zupdax |
| zwShell |
| ZXShell, Sensocode |