RATs, ransomware & infostealers
Curated profiles for well-known, well-documented malware families, cross-referenced against every detection rule Sigma Watch tracks. Each profile links out to authoritative sources — MITRE ATT&CK, CISA advisories, and vendor threat-intel writeups — for eradication and remediation guidance, rather than us writing our own removal steps that could go stale or be wrong.
3PARA RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0066) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
4H RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0065) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Action RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1028) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
AppleJeus
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0584) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
AsyncRAT
AsyncRAT is an open-source, C#-based remote access trojan originally published on GitHub (derived from the NYANxCAT project) that provides screen capture, keylo…
BBSRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0127) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BLINDINGCAN
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0520) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
BLUELIGHT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0657) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bandook
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0234) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bankshot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0239) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Bisonal
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0268) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
COATHANGER
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1105) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cardinal RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0348) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cobalt Strike
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0154) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Cobian RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0338) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Crimson
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0115) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
CrossRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0235) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DRATzarus
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0694) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Dacls
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0497) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DanBot
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1014) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
DarkWatchman
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0673) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ECCENTRICBANDWAGON
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0593) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Equation
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0020) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Explosive
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0569) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FALLCHILL
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0181) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FlawedAmmyy
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0381) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
FlawedGrace
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0383) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Gh0st RAT
Gh0st RAT is a Windows remote access trojan whose source code, originally developed by the C. Rufus Security Team, was leaked publicly around 2008 and has since…
GravityRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0237) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Group5
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G0043) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
GuLoader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0561) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Hi-Zor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0087) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
HotCroissant
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0431) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Imminent Monitor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0434) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
InnaputRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0259) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
JSS Loader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0648) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
KONNI
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0356) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Kivars
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0437) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Lizar
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0681) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
LookBack
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0582) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MCMD
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0500) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MagicRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1182) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MarkiRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0652) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Matryoshka
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0167) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MechaFlounder
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0459) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Micropsia
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0339) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MirageFox
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0280) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
MoonWind
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0149) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NETWIRE
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0198) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NOKKI
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0353) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NanHaiShu
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0228) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
NanoCore
NanoCore is a modular, .NET-based remote access trojan sold on underground forums since 2013, supporting plugins for keylogging, webcam/microphone capture, file…
NavRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0247) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
ObliqueRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0644) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
OceanSalt
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0346) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Out1
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0594) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PLEAD
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0435) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PcShare
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1050) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Penquin
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0587) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Peppy
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0643) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PingPull
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1031) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PlugX
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0013) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PoetRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0428) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PoisonIvy
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0012) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
PureCrypter
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S9019) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
QuasarRAT
QuasarRAT is an open-source, C#-based remote administration tool that has been publicly available on GitHub since 2014, offering keylogging, remote desktop, fil…
ROKRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0240) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Remcos
Remcos ("Remote Control and Surveillance") is a closed-source RAT commercially marketed by the vendor Breaking Security as a legitimate remote-administration to…
Revenge RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0379) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Rifdoor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0433) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
RunningRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0253) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SLOTHFULMEDIA
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0533) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Saint Bear
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1031) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Sakula
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0074) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Snip3
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1086) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
SpicyOmelette
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0646) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TA2541
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (G1018) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TSCookie
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0436) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
TYPEFRAME
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0263) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Taidoor
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0011) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Trojan.Karagany
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0094) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
UBoatRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0333) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
VERMIN
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0257) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
WarzoneRAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0670) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Winnti for Windows
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0141) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Woody RAT
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S1065) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
Zox
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0672) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
hcdLoader
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0071) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …
njRAT
njRAT is a .NET-based remote access trojan first observed around 2012 that has been heavily used by threat actors operating in the Middle East and North Africa.…
zwShell
Auto-detected from the MITRE ATT&CK catalog on 2026-09-28 (S0350) - this entry has not been reviewed or curated yet. See the MITRE ATT&CK link below for what's …