RATs, ransomware & infostealers
Curated profiles for well-known, well-documented malware families, cross-referenced against every detection rule Sigma Watch tracks. Each profile links out to authoritative sources — MITRE ATT&CK, CISA advisories, and vendor threat-intel writeups — for eradication and remediation guidance, rather than us writing our own removal steps that could go stale or be wrong.
3PARA RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0066) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
4H RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0065) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ALPHV/BlackCat
ALPHV/BlackCat was a Rust-based RaaS operation active from November 2021, notable for double extortion attacks including the February 2024 Change Healthcare bre…
Action RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1028) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Agent Tesla
Agent Tesla is a .NET-based remote access trojan/spyware active since 2014, sold commercially and widely pirated/cracked for criminal use rather than run as a f…
Agrius
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1030) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Akira
Akira is a RaaS operation active since March 2023 that conducts double extortion using Windows, Linux, and VMware ESXi encryptors, frequently exploiting VPN/edg…
Akira _v2
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1194) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Apostle
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1133) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
AppleJeus
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0584) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Astaroth
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0373) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
AsyncRAT
AsyncRAT is an open-source, C#-based remote access trojan originally published on GitHub (derived from the NYANxCAT project) that provides screen capture, keylo…
Avaddon
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0640) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
AvosLocker
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1053) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BBSRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0127) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BLINDINGCAN
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0520) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BLUELIGHT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0657) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Babuk
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0638) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bad Rabbit
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0606) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bandook
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0234) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bankshot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0239) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bazar
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0534) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bisonal
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0268) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BitPaymer
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0570) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Black Basta
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1070) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BlackByte
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1043) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BlackByte 2.0 Ransomware
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1181) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BlackByte Ransomware
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1180) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bonadan
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0486) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bumblebee
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1039) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
CHIMNEYSWEEP
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1149) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
COATHANGER
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1105) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Carberp
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0484) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cardinal RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0348) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Chaes
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0631) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cheerscrypt
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1096) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cinnamon Tempest
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1021) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cl0p
Cl0p (Clop) is an extortion group linked to the TA505/FIN11 threat cluster, known since 2019 for mass-exploiting file-transfer and enterprise-software vulnerabi…
Cobalt Strike
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0154) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cobian RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0338) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Conti
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0575) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Crimson
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0115) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
CrossRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0235) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cuba
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0625) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cuckoo Stealer
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1153) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DCSrv
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1033) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DEATHRANSOM
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0616) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DRATzarus
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0694) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Dacls
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0497) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DanBot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1014) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DarkGate
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1111) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DarkWatchman
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0673) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Diavol
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0659) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ECCENTRICBANDWAGON
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0593) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
EKANS
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0605) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
EXOTIC LILY
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1011) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Ebury
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0377) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Egregor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0554) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Embargo
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1247) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Equation
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0020) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Explosive
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0569) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FALLCHILL
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0181) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FIN7
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0046) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FIN8
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0061) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FIVEHANDS
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0618) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FlawedAmmyy
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0381) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FlawedGrace
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0383) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Fooder
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9033) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
GOLD SOUTHFIELD
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0115) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Gh0st RAT
Gh0st RAT is a Windows remote access trojan whose source code, originally developed by the C. Rufus Security Team, was leaked publicly around 2008 and has since…
GravityRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0237) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
GrimAgent
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0632) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Group5
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0043) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
GuLoader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0561) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
H1N1
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0132) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
HELLOKITTY
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0617) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
HUI Loader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1097) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Hancitor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0499) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Hi-Zor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0087) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
HotCroissant
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0431) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
INC Ransom
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1032) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
INC Ransomware
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1139) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
IPsec Helper
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1132) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Imminent Monitor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0434) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Indrik Spider
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0119) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
InnaputRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0259) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
JCry
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0389) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
JSS Loader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0648) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
KGH_SPY
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0526) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
KONNI
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0356) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
KillDisk
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0607) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Kivars
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0437) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
LAMEHUG
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9035) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
LAPSUS$
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1004) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
LP-Notes
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9036) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Lizar
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0681) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
LockBit
LockBit is a Ransomware-as-a-Service (RaaS) operation active since 2019 that became the most prolific ransomware brand of 2022-2023, using double extortion (dat…
LockBit 2.0
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1199) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
LockerGoga
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0372) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Lokibot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0447) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
LookBack
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0582) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Lumma Stealer
Lumma Stealer is a Windows information-stealing malware active since late 2022, sold as malware-as-a-service on Telegram and Russian-language forums (subscripti…
MCMD
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0500) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MagicRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1182) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MarkiRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0652) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Matryoshka
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0167) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Maze
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0449) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MechaFlounder
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0459) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Medusa Group
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1051) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Medusa Ransomware
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1244) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MegaCortex
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0576) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Megazord
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1191) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Micropsia
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0339) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Mini Shai-Hulud
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9043) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MirageFox
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0280) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MirrorStealer
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9022) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Moneybird
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1137) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MoonWind
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0149) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Mustard Tempest
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1020) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NETWIRE
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0198) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NOKKI
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0353) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NanHaiShu
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0228) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NanoCore
NanoCore is a modular, .NET-based remote access trojan sold on underground forums since 2013, supporting plugins for keylogging, webcam/microphone capture, file…
NavRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0247) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Netwalker
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0457) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NotPetya
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0368) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ObliqueRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0644) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
OceanSalt
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0346) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Out1
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0594) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
OwaAuth
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0072) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PACEMAKER
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1109) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PLEAD
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0435) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Pay2Key
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0556) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PcShare
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1050) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Penquin
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0587) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Peppy
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0643) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Pikabot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1145) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PingPull
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1031) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Play
Play (deploying the Playcrypt encryptor) is a closed, non-advertised ransomware operation active since June 2022 that uses double extortion and intermittent enc…
PlugX
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0013) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PoetRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0428) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PoisonIvy
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0012) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Pony
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0453) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Prestige
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1058) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ProLock
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0654) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PureCrypter
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9019) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Pysa
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0583) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
QakBot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0650) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Qilin
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1242) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
QuasarRAT
QuasarRAT is an open-source, C#-based remote administration tool that has been publicly available on GitHub since 2014, offering keylogging, remote desktop, fil…
QuietSieve
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0686) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
REvil
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0496) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ROADSWEEP
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1150) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ROKRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0240) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Raccoon Stealer
Raccoon Stealer is a Windows information-stealing malware sold as malware-as-a-service (roughly $200/month) since 2019, targeting browser passwords, cookies and…
Ragnar Locker
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0481) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Ramsay
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0458) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
RansomHub
RansomHub was a RaaS operation that emerged in February 2024, built on source code derived from the Knight ransomware (itself a rebrand of Cyclops), and rapidly…
Raspberry Robin
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1130) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Rclone
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1040) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
RedLine Stealer
RedLine Stealer is a Windows information-stealing malware, active since 2020, sold as malware-as-a-service via one-time purchases or monthly subscriptions on un…
Remcos
Remcos ("Remote Control and Surveillance") is a closed-source RAT commercially marketed by the vendor Breaking Security as a legitimate remote-administration to…
Revenge RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0379) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Rifdoor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0433) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
RobbinHood
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0400) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Royal
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1073) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Rubeus
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1071) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
RunningRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0253) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Ryuk
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0446) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SLOTHFULMEDIA
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0533) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SMOKEDHAM
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0649) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Saint Bear
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1031) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Sakula
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0074) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SamSam
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0370) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Scattered Spider
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1015) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Seth-Locker
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0639) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Snip3
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1086) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SocGholish
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1124) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SombRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0615) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SpicyOmelette
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0646) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
StealBit
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1200) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
StealC
StealC is a lightweight (~80KB) Windows information stealer that emerged on Russian-speaking underground forums (XSS, BHF) in January 2023, sold as malware-as-a…
Storm-0501
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1053) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Storm-1811
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1046) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
StrelaStealer
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1183) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
StrongPity
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0491) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SynAck
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0242) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SystemBC
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9001) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TA2541
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1018) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TSCookie
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0436) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TYPEFRAME
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0263) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Taidoor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0011) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TeamPCP
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1056) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TeamPCP Cloud Stealer
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9041) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ThiefQuest
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0595) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TrickBot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0266) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Trojan.Karagany
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0094) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Troll Stealer
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1196) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
UBoatRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0333) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
USBferry
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0452) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
VERMIN
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0257) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Valak
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0476) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Vidar Stealer
Vidar is a Windows information-stealing trojan first observed in late 2018, derived from the Arkei stealer lineage and sold/rented on dark-web and underground f…
WARPWIRE
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1116) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
WannaCry
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0366) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
WarzoneRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0670) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
WastedLocker
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0612) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Water Galura
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1050) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
WhisperGate
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0689) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Winnti for Windows
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0141) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Wizard Spider
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0102) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Woody RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1065) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
XLoader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1207) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Xbash
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0341) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Zox
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0672) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
hcdLoader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0071) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
njRAT
njRAT is a .NET-based remote access trojan first observed around 2012 that has been heavily used by threat actors operating in the Middle East and North Africa.…
zwShell
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0350) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …