| Changed | Name |
Tools |
| | 3102 RAT |
| | 3PARA RAT |
| | 3Rat Client |
| | 404-Input-shell web shell |
| | 4H RAT, 4h_rat |
| | 888 RAT |
| | 9002 RAT, McRAT, MdmBot, Homux, Hydraq, HidraQ, HOMEUNIX, Aurora, Roarur |
| | ActionRAT |
| | ActionSpy, AxeSpy |
| | adbupd |
| | Adwind, Adwind RAT, Frutas, jFrutas, UnReCoM, Alien Spy, AlienSpy, JSocket, Sockrat, jBiFrost, JBifrost RAT, Unknown RAT, jConnectPro RAT, Unrecom, Trojan.Maljava |
| | Adzok, Invisible Remote Administrator |
| | Agent.BTZ, Minit, Chinch, Sun rootkit |
| | Agent.DNE |
| | Agent Racoon |
| | agfSpy |
| | AIRBREAK, Orz |
| | Albaniiutas, BlueTraveller |
| | Allakore RAT, AllaKore |
| | Alma Communicator |
| | Amavaldo |
| | Anchor, Anchor_DNS |
| | Andaratm |
| | AndoServer |
| | Android RAT |
| | AndroRAT |
| | Anel, lena, UpperCut |
| | Antak |
| | AntSword |
| | Anubis, BankBot, Go_P00t, android.bankbot, android.bankspy |
| | Anubis Backdoor |
| | AnubisSpy |
| | AnvilEcho |
| | AnyDesk |
| | APERETIF |
| | Apocalipto |
| | ApolloShadow |
| | AppleSeed, JamBog |
| | Ares |
| | AresRAT |
| | Aria-body, AR |
| | AridSpy |
| | Aryan |
| | Asacub, Trojan-SMS.AndroidOS.Smaps |
| | ASPXSpy, ASPXTool |
| | Asruex |
| | AsyncRAT |
| | ATI-Agent |
| | AtlasAgent |
| | ATMDtrack |
| | ATMii |
| | ATMitch |
| | AuditCred, ROptimizer |
| | AUMLIB, yayih, bbsinfo, mswab, Graftor |
| | Auriga, Riodrv |
| | AutoIt backdoor |
| | Ave Maria, AVE_MARIA, AveMariaRAT, avemaria |
| | Aversome infector |
| | Babar, SNOWBALL |
| | BabyShark, LATEOP |
| | BackConfig |
| | Backdoor Batel, Batel |
| | Backoff, Backoff POS |
| | Backspace, Lecna, ZRLnk |
| | BadBazaar |
| | BADCALL |
| | BADFLICK |
| | BadHatch |
| | BADNEWS, JakyllHyde |
| | BadPatch, WelcomeChat |
| | BADSIGNAL |
| | BADSOLAR |
| | Bahamut |
| | Bandook, Bandok |
| | bangat |
| | Banjori, BankPatch, BackPatcher, MultiBanker 2 |
| | Bankshot, COPPERHEDGE, Trojan Manuscript, FoggyBrass |
| | BarbWire |
| | Barlaiy, POISONPLUG |
| | BASICSTAR |
| | Bateleur |
| | BazarBackdoor, BazarLoader, BEERBOT, BazarCall, KEGTAP, Team9Backdoor, bazaloader |
| | BBSRAT |
| | BEACON |
| | beendoor |
| | Behinder |
| | BELLHOP |
| | Bemstour |
| | BendyBear, Waterbear, Deuterbear |
| | Benghazi.exe |
| | BetaBot, Neurevt |
| | Bezigate |
| | BH_A006 |
| | BIASBOAT |
| | BIFROST, elf.bifrose |
| | Bioazih |
| | BIOPASS RAT, BIOPASS |
| | BISCUIT, zxdosml |
| | Bisonal, Korlia |
| | BISTROMATH |
| | BitRAT |
| | BitterRAT, Bitter RAT |
| | BITTERSWEET |
| | Bizarro, Bizzaro |
| | BlackCoffee, PNGRAT, ZoxPNG, gresim |
| | BlackEnergy, Black Energy |
| | Black Lambert |
| | BlackMould |
| | BlackNET RAT |
| | BlackRAT, BlackRemote |
| | BlackRock, AmpleBot |
| | BlackSmith |
| | BlankBot |
| | BLINDINGCAN, DRATzarus RAT, AIRDRY, ZetaNile |
| | BlotchyQuasar |
| | BLUEAGAVE |
| | BLUEBEAM |
| | BlueCore |
| | BLUELIGHT |
| | BlueShell |
| | Bluether, CAPGELD |
| | BOLDMOVE |
| | BONDUPDATER, Poison Frog, Glimpse |
| | BoneSpy |
| | Bookcode |
| | Bookworm |
| | Bouncer |
| | Bozok, Bozok RAT |
| | Brambul, SierraBravo, SORRYBRUTE |
| | Brave Prince |
| | BreachRAT |
| | Briba |
| | BRICKSTORM |
| | BrittleBush |
| | Brute Ratel, Brute Ratel C4 |
| | BrutPOS |
| | BS2005 |
| | BUBBLEWRAP, Backdoor.APT.FakeWinHTTPHelper |
| | BUFFETLINE |
| | BugSleep, MuddyRot |
| | Buhtrap, Ratopak |
| | BumbleBee, COLDTRAIN, SHELLSTING, Shindig |
| | Bvp47 |
| | Byeby |
| | BypassBoss |
| | ByPassGodzilla |
| | C0d0so0 |
| | Cadelspy, Cadelle, WinSpy |
| | CALENDAR |
| | callCam |
| | CallMe |
| | Calypso RAT |
| | Cannon |
| | CapraRAT |
| | Capriccio RAT |
| | Carbanak, Anunak, Sekur, Sekur RAT |
| | CarbonSteal |
| | Cardinal RAT |
| | Careto, Mask, Appetite |
| | CASHY200 |
| | CASTLETAP |
| | Catchamas |
| | Caterpillar |
| | CDorked, CDorked.A |
| | CenterPOS, Cerebrus |
| | Cerberus |
| | CetaRAT |
| | CHAIRSMACK |
| | CHAVECLOAK |
| | ChChes, HAYMAKER, Ham Backdoor, Scorpion |
| | CheeseTray, CROWDEDFLOUNDER |
| | CHERRYSPY |
| | China Chopper, CHINACHOPPER, SinoChopper |
| | Chinoxy |
| | Chrommme |
| | Cinobi |
| | CLAMBLING, Clambling |
| | CLNTEND |
| | CLOSEWATCH |
| | CloudDuke, Cloud Duke, MiniDionis, CloudLook |
| | CloudScout |
| | CLOUDSTATS |
| | CMD365 |
| | CMDEmber |
| | CmdSQL |
| | COATHANGER |
| | Cobalt Strike, CobaltStrike, Agentemis, BEACON, cobeacon |
| | Cobra Carbon System, Carbon, Pfinet |
| | CollectionRAT |
| | Combos |
| | Comfoo, Comfoo RAT |
| | CommonMagic |
| | Comnie |
| | COMpfun, Reductor RAT |
| | ComRAT |
| | Concealment Troy, concealment_troy |
| | Confucius, ChatSpy |
| | Contopee, WHITEOUT |
| | CookieBag, TROJAN.COOKIES |
| | CookieTime |
| | Corentry, Fluxwire |
| | CosmicDuke, TinyBaron, BotgenStudios, NemesisGemina |
| | Cotx RAT |
| | CoughingDown |
| | CozyDuke, CozyCar, CozyBear, Cozer, EuroAPT |
| | CREDRIVER |
| | CreepyDrive |
| | CreepySnail |
| | Crimson RAT, Crimson, SEEDOOR, Scarimson, MSIL, MSIL/Crimson |
| | CrossC2 |
| | CrossRAT, Trupto |
| | CrossWalk, Motnug, ProxIP, TOMMYGUN |
| | Crowdoor |
| | Crutch |
| | Cryptmerlin |
| | CsExt |
| | Cuegoe |
| | Cyan Lambert |
| | CyberGate RAT, CyberGate, Rebhip |
| | Cyclops Blink, CyclopsBlink |
| | Dacls RAT, Dacls |
| | DADJOKE |
| | Dadstache |
| | Dagger Three |
| | Dairy |
| | DanBot |
| | Danfuan |
| | DarkComet, DarkKomet, Fynloski, FYNLOS, klovbot, Krademok, Breut |
| | DarkCrystal RAT, DCRat |
| | DarkHotel |
| | DarkMe |
| | DarkNimbus |
| | DarkPulsar |
| | DarkRAT |
| | Dark Tequila, DarkTequila |
| | DarkVNC |
| | Daserf, Muirim, Nioupale |
| | Datper |
| | DBoxAgent |
| | DDKONG |
| | Deadglyph |
| | DeepCreep |
| | Deed RAT, SnappyBee |
| | DELPHSTATS |
| | DeltaCharlie |
| | Demodex |
| | Dendroid |
| | DeputyDog, Fexel |
| | Derusbi, PHOTO |
| | Desert Scorpion |
| | DetaRAT |
| | Dexbia, CONIME |
| | Dexter, LusyPOS, StarDust |
| | dfrgntfs5.sqt |
| | DILLJUICE, FYAnti |
| | Dino |
| | DinodasRAT, XDealer |
| | DLRAT |
| | DMSniff |
| | dmsSpy |
| | dneSpy |
| | DNSpionage, Agent Drable, AgentDrable |
| | DNSRat, DNSbot |
| | DOGCALL |
| | Dolphin |
| | DoorMe |
| | DOPLUGS |
| | Doraemon |
| | Dorshel |
| | DoubleAgent |
| | DoubleT |
| | Dracarys |
| | DragonEgg, LightSpy |
| | DRATzarus |
| | DRIFTPIN, Toshliph, Spy.Agent.ORM |
| | Dripion, Masson |
| | DroidJack |
| | DropBook |
| | Drovorub |
| | Dtrack, TroyRAT, Preft |
| | Duqu, Tilded |
| | DustySky, NeD Worm |
| | Duuzer, Escad |
| | Dyre, Dyreza, Dyzap, Dyranges |
| | EAGLEDOOR |
| | Ebury |
| | EHDevel |
| | Elirks |
| | Elise, BKDR_ESILE, EVILNEST, Page |
| | ElizaRAT |
| | ELMER, Elmost |
| | Emdivi, Newsripper |
| | Emissary |
| | EmpireDNSAgent, EDA |
| | EmpireProject, Empire, EmPyre, PowerShell Empire |
| | Epic, Epic Turla, Tavdig, Wipbot, WorldCupSec, TadjMakhal |
| | EpicenterRAT |
| | EQUATIONDRUG, EQUESTRE |
| | EQUATIONLASER |
| | ERMAC |
| | ESRDE |
| | EtherealGh0st |
| | ETUMBOT, RIPTIDE, HIGHTIDE, Exploz, Specfix |
| | EvilBunny |
| | EvilGnome |
| | EvilGrab RAT, EvilGrab, Vidgrab, Wmonder, BKDR_HGDER, BKDR_EVILOGE, BKDR_NVICM |
| | Evilnum, EVILNUM, Marvel |
| | Exaramel |
| | Excalibur, Sabresac, Saber |
| | ExileRAT, Exile RAT |
| | Explosive |
| | EYE |
| | EYService |
| | FakeM, FakeM RAT, Terminator RAT |
| | FakeTC |
| | FALLCHILL, FallChill RAT |
| | FalseFont |
| | Farseer |
| | FastPOS |
| | FatalRAT, Sainbox RAT |
| | FatDuke |
| | Felismus |
| | Felixroot, GreyEnergy mini |
| | Fimlis |
| | FindPOS, PoSeidon |
| | FinFisher, FinFisher RAT, FinSpy |
| | FireWood |
| | Flame, Flamer, sKyWIper, Skywiper |
| | Flapjack |
| | FlawedAmmyy, AmmyyRAT |
| | FlawedGrace, GraceWire |
| | FleetDeck |
| | FlipCreep |
| | FlokiBot |
| | FlowCloud |
| | FlowerPippi |
| | FluffyGh0st |
| | FlyingDutchman |
| | Fobber |
| | FoggyWeb |
| | Formbook, win.xloader |
| | FormerFirstRAT, FF-RAT, ffrat |
| | FoundCore, RainyDay |
| | FRAUDROP |
| | FrozenCell |
| | FruityC2 |
| | FunnyDream |
| | FunnySwitch, RouterGod |
| | FurBall |
| | FuxosDoor |
| | Gamaredon |
| | GammaLoad |
| | Gazer, WhiteBear |
| | Gcat |
| | Gelsevirine |
| | GeminiDuke |
| | Gh0stnet, Ghostnet, Remosh |
| | Gh0stCringe |
| | Gh0st RAT, Ghost RAT, AngryRebel, Farfli, PCRat, Moudour, Mydoor |
| | Gh0stTimes |
| | Ghambar |
| | Gh0stCringe RAT |
| | GHOSTSPIDER |
| | Gigabud, Gigabud RAT |
| | GIMMICK |
| | GlanceLove, WinkChat |
| | GLASSTOKEN |
| | GLOOXMAIL, Trojan.GTALK |
| | GnatSpy |
| | GoBot2 |
| | Godlua |
| | GORBLE |
| | GOLDBACKDOOR |
| | Gold Dragon, GoldDragon, Lovexxx |
| | GoldenEagle |
| | GoldenRAT |
| | GoldFinder |
| | GoldMax, SUNSHUTTLE |
| | GollumApp |
| | Goodor, Fuerboos |
| | GoogleDrive RAT |
| | Gootkit, Gootloader, Xswkit, talalpek, Waldek |
| | Gopuram |
| | Gorynych, Gorynch, Diamond Fox, DiamondFox, Crystal |
| | GotoHTTP |
| | Graphican |
| | Graphiron |
| | Graphite |
| | Graphon |
| | GraphSteel, Elephant Client |
| | GravityRAT |
| | GRAYFISH |
| | Gray Lambert |
| | GREENCAT |
| | GreezeBackdoor |
| | GrewApacha |
| | GreyEnergy |
| | GRILLMARK, Hellsing Backdoor |
| | GrimPlant, Elephant Implant |
| | GUP Proxy Tool |
| | Hackfase, Hacksfase |
| | HALFBAKED, VB Flash |
| | HALFSHELL |
| | HammerDuke, HAMMERTOSS, NetDuke, tDiscoverer |
| | Hannotog |
| | HARDRAIN |
| | Harpoon, Garpun |
| | Havex RAT, Havex, Oldrea, Backdoor.Oldrea, Fertger, PEACEPIPE |
| | Hawup, Hawup RAT |
| | hcdLoader |
| | HDoor, Custom HDoor |
| | HDRoot, HDD Rootkit |
| | Headlace |
| | Helauto |
| | Helminth |
| | HemiGate |
| | Heriplor |
| | HiddenLotus |
| | HighNoon |
| | HiKit |
| | Hisoka |
| | HKDOOR |
| | Hodur |
| | HoldingHands RAT, Gh0stBins |
| | Hornbill |
| | HOTCROISSANT, HotCroissant |
| | HTTPBrowser, HttpBrowser RAT, HttpDump, TokenControl, Token Control |
| | httpclient |
| | Http Dr0pper, httpdr0pper, httpdropper |
| | HTTPSnoop, TOFULOAD |
| | HTTP Troy, http_troy |
| | Hupigon, Hupigon RAT, BKDR_HUPIGON, MFC Huner |
| | Hurix |
| | H-Worm, H-Worm RAT, Houdini RAT, Houdini, Hworm, Njw0rm, Iniduoh, Jenxcus, Kognito, WSHRAT, dinihou, dunihi |
| | HyperBro |
| | HyperStack, GoldenSky, SilentMoon, Turla SilentMoon, BigBoss, Cacao |
| | IcedCoffee |
| | Icefog, Fucobha |
| | IHEATE |
| | IMAPLoader |
| | Imecab |
| | Imminent Monitor RAT, Imminent Monitor |
| | Inception |
| | Industroyer, Crash, CrashOverride, CRASHOVERRIDE, Win32/Industroyer |
| | Industroyer2 |
| | InsidiousGh0st |
| | InvisibleFerret |
| | InvisiMole |
| | IPsec Helper |
| | IRAFAU |
| | IronWind |
| | ISMAgent |
| | ISMDoor |
| | IsSpace, NfLog RAT |
| | IXESHE |
| | JackalControl |
| | JackPOS |
| | JadeRAT |
| | Janeleiro |
| | Janicab |
| | Javafog |
| | JESTBOT |
| | JhoneRAT |
| | JHUHUGIT, Seduploader, JKEYSKW, Sednit, Downrage, GAMEFISH, carberplike, SofacyCarberp, Carberp, Trojan.Sofacy |
| | JLORAT |
| | Joanap, SierraJuliett-MikeOne, SierraJuliett-MikeTwo |
| | JPIN |
| | JRat, Jacksbot |
| | JripBot, Jiripbot |
| | JS Flash |
| | jsp File browser |
| | JSPRAT |
| | JSPSPY |
| | JSSLoader, FOWLGAZE |
| | JuicyPotato |
| | JuicyPotatoNG |
| | KamiKakaBot |
| | KANDYKORN |
| | KARAE |
| | Karagany, Karagny, Trojan.Karagany, xFrost |
| | Karba, Trojan.Win32.Karba.e |
| | Karkoff, MailDropper, DropperBackdoor, CACTUSPIPE, OILYFACE |
| | KasperAgent |
| | Kazuar |
| | Ketrican |
| | Ketrum |
| | KevDroid |
| | KeyBoy, TSSL |
| | KEYMARBLE |
| | KEYPLUG, ELFSHELF |
| | KGH_SPY, KGH Spyware Suite |
| | KHRAT |
| | Kikothac |
| | Killua |
| | KimJongRAT |
| | KingOfHearts |
| | Koadic |
| | Komplex |
| | KOMPROGO, Splinter RAT |
| | Konni |
| | KopiLuwak |
| | Krasue |
| | KRNRAT |
| | KsRemote |
| | KTLVdoor |
| | Kurton |
| | Kwampirs |
| | Lastacloud |
| | LastConn |
| | Lazarus, HIDDEN COBRA RAT/Worm |
| | Leash |
| | LEMONSTICK |
| | Leo RAT |
| | LEOUNCIA, shoco |
| | Licat, Murofet |
| | LIFEBOAT |
| | LIGHTBOLT |
| | LightlessCan |
| | lightSpy |
| | LIGHTWIRE |
| | Lilith RAT, Lilith |
| | LimeRAT |
| | Linfo |
| | LiteDuke |
| | Lizar, Tirion, DICELOADER |
| | LOADGRIP |
| | Loda, Loda RAT, LodaRAT, Nymeria |
| | LODEINFO |
| | logon.dll |
| | logsupport.dll |
| | LoJax |
| | LokiBot, Loki, LokiPWS, Loki.Rat, ForeIT |
| | LONGRUN |
| | LOWBALL |
| | Lowkey, PortReuse |
| | LuaDream, DreamLand |
| | Lucky Cat, LuckyCat |
| | Luminosity RAT, LuminosityLink |
| | Machete, El Machete |
| | Macma, MacMa, CDDS, OSX.CDDS, DazzleSpy |
| | Madness PRO DDoS |
| | Magenta Lambert |
| | MagicRAT |
| | MagicWeb |
| | MAILSLOT |
| | MajikPOS |
| | ManItsMe |
| | MargulasRAT |
| | MarkiRAT |
| | Marlin |
| | MASOL RAT, Backdr-NQ |
| | MATA |
| | Matryoshka RAT, Matryoshka |
| | Md_client |
| | MechaFlounder |
| | MediaPl, EYEGLASS |
| | MegaCreep |
| | Mekotio, Metamorfo, Casbaneiro |
| | Merdoor |
| | METALJACK, denesRAT |
| | Metel |
| | MgBot, BLame, Mgmbot, POCOSTICK |
| | MiamiBeach |
| | Microcin, Mikroceen |
| | Milan, James |
| | Milum |
| | MINEBRIDGE, MINEBRIDGE RAT, GazGolder |
| | MiniASP |
| | MINIBIKE |
| | MINIBUS |
| | MiniDuke |
| | MiniWebCmdShell |
| | MirageFox |
| | MischiefTut |
| | Misdat |
| | MiS-Type |
| | Mivast |
| | MIXLABEL |
| | MMRat |
| | MobileOrder |
| | ModPipe |
| | ModPOS, straxbot |
| | MoleNet |
| | Mongall |
| | MoonBounce |
| | MoonPeak |
| | MOONSHINE |
| | MoonWalk, CurveLast, SneakCross |
| | MoonWind RAT, MoonWind |
| | MOPSLED |
| | More_eggs, SpicyOmelette, Terra Loader, SKID |
| | Moriya |
| | Mosquito |
| | MPKBot, MPK |
| | MQsTTang, QMAGENT |
| | MSUpdater |
| | MuddyC2Go |
| | Mudwater |
| | Munchkin |
| | MY24 |
| | MyDogs |
| | MysterySnail RAT, MysterySnail |
| | N1stAgent |
| | NachoCheese, NACHOCHEESE, Cyruslish, TWOPENCE, VIVACIOUSGIFT |
| | Naid, Trojan.Naid, Mdmbot.E, AGENT.GUNZ, AGENT.AQUP.DROPPER, AGENT.BMZA, MCRAT.A, AGENT.ABQMR |
| | Naikon, XsFunction, Sacto |
| | NanHaiShu |
| | NanoCore RAT, NanoCore, Nancrat, Zurten, Atros2.CKPN |
| | Nautilus |
| | NavRAT, JinhoSpy |
| | NCAT |
| | NDiskMonitor |
| | Nebulae |
| | Neptun |
| | Nerex |
| | NestEgg |
| | netcat |
| | NetEagle, ScoutEagle, scout, Neteagle_Scout, norton |
| | Netero |
| | NetHelp Infostealer, NetHelp Striker |
| | NetSupport Manager, NetSupport Manager RAT, NetSupportManager RAT, NetSupport RAT, NetSupport |
| | NetTraveler, TravNet, Netfile |
| | NETVulture |
| | NetWire RC, NetWire RAT, NetWired RC, NetWire, NetWeird, Recam |
| | Neuron |
| | Neutrino, Neutrino Bot, Neutrino Exploit Kit, Kasidet |
| | NewCore RAT |
| | NewCT2 |
| | NewPass |
| | NewsReels |
| | NFlog |
| | Ngrok |
| | Nidiran, Backdoor.Nidiran |
| | Nightdoor, NetMM, Suzafk |
| | NimbleMamba |
| | Nimcy |
| | NineBlog |
| | NineRAT |
| | Ninja |
| | njRAT, Bladabindi, Jorik |
| | Nokki |
| | NOKNOK |
| | NOOPDOOR, HiddenFace |
| | NPS |
| | NSPX30 |
| | NukeSped |
| | Numando |
| | ObliqueRAT, Oblique RAT |
| | OceanLotus, OSX_OCEANLOTUS.D, Backdoor.MacOS.OCEANLOTUS.F |
| | OCEANMAP |
| | Oceansalt |
| | Octopus |
| | OddJob |
| | Odinaff |
| | Okrum |
| | OKSOLO |
| | OopsIE |
| | OpGhoul |
| | oRAT |
| | Orcus RAT, Orcus, Schnorchel |
| | ORPCBackdoor |
| | OtterCookie |
| | Outlook Backdoor, FACADE |
| | OwaAuth, luckyowa |
| | P0wnyshell, Ponyshell, Pownyshell |
| | P8RAT, GreetCake |
| | PACMAN |
| | Paladin RAT, Paladin |
| | Pantegana |
| | PapaCreep |
| | Paperbug |
| | Parallax RAT, ParallaxRAT, Parallax |
| | P.A.S., PAS, Fobushell |
| | Pasam |
| | PCClient |
| | PCShare |
| | PEBBLEDASH |
| | Pegasus, Q Suite, Chrysaor, JigglyPuff |
| | Penquin Turla |
| | Peppy RAT, Peppy Trojan |
| | PGoShell |
| | PhanDoor |
| | PhantomLance, PWNDROID1, Android.Backdoor.736.origin |
| | PhantomNet, SManager |
| | PhonyC2 |
| | PHOREAL, Rizzo |
| | PHPsert |
| | PhpSpy |
| | Pierogi |
| | PikoloRAT |
| | PINEFLOWER, CORRUPT KITTEN |
| | PingPull |
| | PipeMon |
| | PipeSnoop, TOFUPIPE |
| | Pirpi, SHOTPUT, Badey, EXL, CookieCutter, Backdoor.APT.CookieCutter |
| | Pisloader, Roseam |
| | Pitty, PittyTiger RAT |
| | PlainGnome |
| | PLAINTEE |
| | PLANKWALK |
| | PLEAD, DRAWDOWN, GOODTIMES, Linopid, TSCookie |
| | PluginPhantom |
| | PlugX, Destroy RAT, DestroyRAT, Korplug, Sogu, Kaba, Xamtrav, Agent.dhwf, RedDelta, TIGERPLUG, Thoper, TVT |
| | PlugY |
| | pngdowner |
| | PoisonCarp, INSOMNIA |
| | Poison Ivy, pivy, poisonivy, Gen:Trojan.Heur.PT, Darkmoon, Chymine, SPIVY |
| | Poldat, Zlib, KABOB |
| | PolyglotDuke |
| | PondRAT, SimplexTea, SimpleTea |
| | POOLRAT, SIMPLESEA |
| | POORAIM, Backdoor.APT.POORAIM |
| | PoshC2 |
| | POSHSPY |
| | PoSlurp, PUNCHTRACK, PSVC |
| | POTROAST |
| | PowerBand |
| | PowerBrace |
| | PowerDuke |
| | PowerExchange |
| | PowerLess Backdoor |
| | PowerMagic |
| | Powermud |
| | PowerPepper |
| | POWERPLANT, KillACK |
| | PowerRatankba, QUICKRIDE.POWER |
| | PowerShell RAT |
| | PowerShellRunner-based RPC backdoor, PowerShellRunner |
| | Powersing |
| | POWERSOURCE |
| | PowerSploit |
| | PowerStallion |
| | POWERSTAR, CharmPower, GorjolEcho |
| | POWERSTATS, Valyria |
| | POWERTON |
| | PowerTrick |
| | PowHeartBeat |
| | POWRUNER |
| | POWSSHNET |
| | PRB-Backdoor, prb_backdoor |
| | Predator, Lycantrox |
| | Prikormka |
| | Pro POS |
| | Protux |
| | Proxysvc |
| | PseudoManuscrypt |
| | PsiXBot, PsiX |
| | PSLogger, ECCENTRICBANDWAGON |
| | Psylo |
| | Pteranodon, Pterodo |
| | PubFantacy |
| | PULSEPACK |
| | Pulseway |
| | PunchBuggy, ShellTea, Powersniff |
| | PupyRAT, Pupy, pupy |
| | Purple Lambert |
| | PVZ-In |
| | PVZ-Out, PvzOut |
| | Pyark |
| | PyFlash |
| | PylangGhost |
| | Pylot, Travle |
| | PyMICROPSIA |
| | PyVil RAT, PyVil |
| | PyXie, PyXie RAT |
| | Qadars |
| | QakBot, QuakBot, QuackBot, Qbot, PinkSlip, Pinkslipbot, Oakboat |
| | QCRat |
| | QUADAGENT |
| | QuarkBandit |
| | QuasarRAT, Quasar RAT, CinaRAT, Yggdrasil |
| | QueenOfClubs, SlothfulMedia |
| | QueenOfHearts |
| | QUEUESEED, IcyWell, Kapeka |
| | QUIETEXIT |
| | QuiteRAT, Acres |
| | RADIOSTAR |
| | Ragnatela, Ragnatela RAT |
| | RAINDROP |
| | Rambo, brebsd |
| | Ramsay |
| | Rana |
| | Ranbyus |
| | RARSTONE |
| | Raspberry Robin, RaspberryRobin, LINK_MSIEXEC, QNAP-Worm |
| | Ratankba, Ratabanka, QUICKRIDE |
| | RatankbaPOS, RatabankaPOS |
| | RATel |
| | RatSnif |
| | RawPOS, FIENDCRY, DUEBREW, DRIFTWOOD |
| | RCSession |
| | RCS Galileo |
| | RC SHELL |
| | RDAT, GREYSTUFF |
| | RDFSNIFFER |
| | RDP, Remote Desktop Protocol |
| | RDPWrap |
| | ReconModule |
| | RedAlpha |
| | RedCore |
| | redis-rogue-getshell |
| | RedLeaves, BUGJUICE |
| | RedLine, RedLine Stealer |
| | RedPepper, Adupib |
| | RedSalt, Dipsind |
| | RedXOR |
| | RegDuke |
| | reGeorg |
| | Regin, Prax, WarriorPride |
| | Remcom, RemoteCommandExecution |
| | RemcosRAT, Remcos, Remvio, Socmer |
| | Remexi, CACHEMONEY |
| | remote-access-c3 |
| | Remote CMD/PowerShell terminal |
| | Remote Control System, RCS, Crisis |
| | Remsec, Backdoor.Remsec, ProjectSauron |
| | RemShell |
| | Remy, Remy RAT, WINDSHIELD |
| | REPTILE |
| | Reshell |
| | Retefe (Android) |
| | Retro |
| | RevengeRAT, Revenge RAT, Revenge, Revetrat |
| | ReverseRAT |
| | ReZer0 |
| | RGDoor |
| | Rifdoor |
| | RIFLESPINE |
| | Rising Sun |
| | RMS, Remote Manipulator System, Gussdoor, RuRAT |
| | ROCK, yellowalbatross |
| | RocketMan |
| | RogueRobin, RogueRobinNET |
| | RotBot |
| | RokRAT |
| | Roland, Roland RAT |
| | ROMCOM RAT, ROMCOM, PEAPOD, SingleCamper, SnipBot |
| | Romeos, RomeoCore, Romeo-CoreOne, R-C1 |
| | RomeoAlfa, AlphaNC |
| | RomeoBravo, BravoNC |
| | RomeoCharlie |
| | RomeoDelta, DeltaNC |
| | RomeoEcho |
| | RomeoFoxtrot |
| | RomeoGolf |
| | RomeoHotel |
| | RomeoMike |
| | RomeoNovember |
| | RomeoWhiskey, Winsec |
| | RottenPotato |
| | RoyalCli |
| | RoyalDNS, Royal DNS |
| | RTM, RTM Banker, Redaman |
| | RtPOS |
| | RunningRAT, Running RAT, running_rat |
| | RustBucket |
| | RustDesk |
| | RustDown |
| | Safe |
| | Sagerunex |
| | Saitama, Saitama Backdoor, AMATIAS |
| | Sakabota |
| | Sakula RAT, Sakula, Sakurel, VIPER |
| | Salgorea, BadCake |
| | Samurai |
| | SandroRAT |
| | Sardonic, Ragnar Loader |
| | Satellite Turla |
| | Scieron |
| | Scotch |
| | Scote |
| | ScreenConnect, ConnectWise |
| | sctrls |
| | SDBbot |
| | SeaDuke, SeaDaddy, SeaDesk, SeaDask |
| | Seasalt |
| | SEAWEED |
| | Sedreco, AZZY, EVILTOSS, ADVSTORESHELL, NETUI |
| | Sepulcher |
| | Serveo |
| | ServHelper |
| | SessionManager |
| | ShadowHammer, DAYJOB |
| | ShadowNet |
| | ShadowPad Winnti, POISONPLUG.SHADOW, XShellGhost |
| | ShadyRAT |
| | Shark |
| | SharpEfsPotato |
| | SHARPEXT |
| | SharpJSHandler |
| | SharpStage |
| | SHARPSTATS |
| | SharPyShell |
| | SheepRAT |
| | ShimRAT, Shim RAT |
| | Shootback |
| | SHUTTERSPEED |
| | Sibot |
| | SIDESHOW |
| | SideTwist |
| | SideWalk, ScrambleCross |
| | Silence, Silence.Downloader, TrueBot |
| | SilentGh0st |
| | Silent Night |
| | SilkBean |
| | SilverHawk |
| | Silver Lambert |
| | Sinowal, Anserin, Mebroot, Quarian, Theola, Torpig |
| | Sisfader, Sisfader RAT |
| | Sisron |
| | SkeletonKeyInjector |
| | SkinnyBoy |
| | Skip-2.0 |
| | Skipper, Kotel |
| | SLAPSTICK |
| | sLoad, StarsLord |
| | SLICKSHOES |
| | SLOWDRIFT |
| | SLOWROLL |
| | SlowStepper |
| | SLRat |
| | SLUB |
| | SlugResin |
| | SmallTiger |
| | SmsSpy |
| | Sneepy, ByeByeShell |
| | SNUGRIDE |
| | Snugy |
| | SocksBot, BIRDDOG, Nadrac |
| | SodaMaster, DelfsCake, dfls, DARKTOWN, HEAVYPOT |
| | SodomMain, SodomMain RAT |
| | Sojax |
| | SombRAT |
| | Sorgu |
| | SOUNDBITE, Denis |
| | S.O.V.A. |
| | Spark |
| | SparkRAT |
| | SparrowDoor, FamousSparrow |
| | Speculoos |
| | Spedear |
| | Spellbinder |
| | SPICA |
| | Spindest, Backdoor.Apocalipto |
| | SPINNER |
| | Splashtop |
| | Sponsor |
| | SprySOCKS |
| | SpyAgent |
| | SpyC23 |
| | Spyder |
| | SpyGlace |
| | SpyMax |
| | SpyNote RAT, SpyNote, CypherRat |
| | SpyWaller |
| | sqllauncher.dll |
| | SQLRAT |
| | SslMM |
| | SSLove RAT |
| | StarsyPound |
| | StealthFalcon |
| | Stealth Mango |
| | StickyFingers, QUICKBALL |
| | StreamEx |
| | StrifeWater, StrifeWater RAT |
| | StrongPity |
| | StrongPity2 |
| | StrongPity3 |
| | Stubbedoor |
| | S-Type |
| | SUBTLE-PAWS |
| | SunBird |
| | SUNBURST, Solorigate |
| | SUPERNOVA |
| | SVCMONDR |
| | SWEARJAR |
| | SWEETCANDLE |
| | SweetSpecter |
| | Sword |
| | Sword2033 |
| | Sys10 |
| | Syscon, SYSCON, Sanny |
| | SystemBC, Coroxy, DroxiDat |
| | SysGet, HelloBridge |
| | SysJoker |
| | SysKit, IvizTech, MANGOPUNCH |
| | Sysmain |
| | SysUpdate, FOCUSFJORD, HyperSSL, Soldier |
| | TabMsgSQL, LETSGO |
| | TacticalRMM |
| | Taidoor, simbot |
| | Tailscale |
| | TAINTEDSCRIBE |
| | TAMECAT |
| | Tapaoux |
| | Tarsip |
| | TDTESS |
| | TeaBot, Anatsa, Toddler, ReBot |
| | TeamSpy, TVSpy, TVRAT, SpY-Agent, TeamViewerENT |
| | TeamViewer |
| | TechnoCreep |
| | TeleBot |
| | TeleDoor |
| | Telemiris |
| | TelePowerBot |
| | Tempting Cedar Spyware, TemptingCedar Spyware |
| | TERA |
| | Termite |
| | TerraTV, Taurus Loader TeamViewer Module |
| | The CloudSorcerer |
| | THINCRUST |
| | THOR |
| | ThreatNeedle, DRATzarus |
| | THREEBYTE |
| | Tickler |
| | TidePool |
| | TigerRAT, Tiger RAT |
| | TightVNC |
| | TinyNode |
| | TinyNote |
| | TinyNuke, NukeBot, Nuclear Bot, MicroBankingTrojan, Xbot |
| | TinyPOS |
| | TinyPosh |
| | Tiny SHell, tsh |
| | TinyTurla |
| | TinyTurla-NG, TinyTurla Next Generation, TTNG |
| | TINYTYPHON |
| | TinyZBot |
| | Titan |
| | Titanium |
| | TManger, LuckyBack |
| | TODDLERSHARK |
| | Tofu Backdoor |
| | TOITOIN |
| | Tomiris |
| | TONEDEAF |
| | TONEDEAF 2.0 |
| | TONESHELL |
| | Tonnerre |
| | Topinambour |
| | Torn RAT |
| | ToxicPanda |
| | TrailBlazer |
| | TranslucentGh0st |
| | TriangleDB |
| | TrickBot, Trickster, The Trick, TheTrick, Totbrick, TrickLoader, TSPY_TRICKLOAD |
| | TRIPLEFANTASY |
| | Triton, TRITON, Trisis, TRISIS, HatMan |
| | TriFive |
| | Trochilus RAT |
| | Troy |
| | TsarBot |
| | TTCalc |
| | TunnelSpecter |
| | Tunnus, QUIETCANARY, Kapushka |
| | Turian |
| | TurlaChopper |
| | TURNEDUP, Notestuk |
| | TwoFace, Minion, HighShell, HyperShell, SEASHARPEE |
| | UltraVNC |
| | UNITEDRAKE |
| | Unknown Logger |
| | updater.mod |
| | UpDocX |
| | Uroburos, Urouros, Turla, Snake |
| | USBferry |
| | USBWorm |
| | Vadokrist |
| | Valak, Valek |
| | ValeforBeta |
| | VAMP, android.micropsia |
| | VARGEIT |
| | Vasport |
| | VBREVSHELL |
| | VEILEDSIGNAL |
| | VeilShell |
| | VELVETSTING |
| | VenomRAT |
| | ViceLeaker, Triout |
| | VIDEOKILLER |
| | VileRAT |
| | VINETHORN |
| | Violet Lambert |
| | ViperRAT, Viper RAT |
| | VIRTUALPIE |
| | VIRTUALPITA |
| | VIRTUALSHINE |
| | Vizom |
| | Vjw0rm, Vengeance Justice Worm |
| | VNC, Virtual Network Computing |
| | Voice Massege.apk |
| | Voldemort |
| | Volgmer, Manuscrypt |
| | VolatileVenom |
| | VPNFilter |
| | VSingle |
| | vSkimmer |
| | Vyveva |
| | Waizsar RAT |
| | WARP |
| | Warzone RAT, Warzone |
| | WastedLoader |
| | WaterSpout |
| | WebC2, WebC2-AdSpace, WebC2-Ausov, WebC2-Bolid, WebC2-Cson, WebC2-DIV, WebC2-GreenCat, WebC2-Head, WebC2-Kt3, WebC2-Qbp, WebC2-Rave, WebC2-Table, WebC2-UGX, WebC2-Yahoo |
| | Weevly |
| | WellMail |
| | WellMess, elf.wellmess |
| | WhiskerSpy |
| | Whitebird |
| | White Lambert |
| | Wiarp |
| | WindTail |
| | WINELOADER |
| | WINERACK |
| | Wingbird |
| | WinMM |
| | Winnti, BleDoor, RbDoor, RibDoor |
| | WinorDLL64 |
| | Winos |
| | WINTERLOVE |
| | WispRider |
| | WIREFIRE, GIFTEDVISITOR |
| | WizardNet |
| | WMI Ghost, Wimmie, Syndicasec |
| | WndTest |
| | WolfRAT, W1_RAT |
| | WolfsBane |
| | WSCSPL |
| | WSO, Webshell by Orb |
| | WyrmSpy, AndroidControl |
| | X-Agent, Xagent, Popr-d30, SPLM, CHOPSTICK, fysbis, Backdoor.SofacyX, webhp |
| | XBOW |
| | xDll |
| | XDOOR, X-Door |
| | XDMonitor |
| | xPack, NERAPACK |
| | xRAT |
| | XSLCmd |
| | xsPlus, xsControl, nokian |
| | XtremeRAT, Xtreme RAT, ExtRat |
| | Yahoyah, W32/Seeav |
| | YamaBot, Kaos |
| | Yort |
| | yty, Jaca |
| | Zanubis |
| | Zebrocy, Zekapab |
| | ZeGhost, BackDoor-FBZT!52D84425CDF2, Trojan.Win32.Staser.ytq, Win32/Zegost.BW |
| | Zingdoor |
| | ZIPLINE |
| | ZitMo, ZeuS-in-the-Mobile |
| | ZooPark |
| | ZoxRPC, Zox, ZoxPNG, Gresim |
| | XPCTRA, Expectra |
| | Z*Stealer, ZStealer |
| | Zupdax |
| | zwShell |
| | ZXShell, Sensocode |
