Malware Families page 60 of 63
6,272 malware families profiled on the Maltiverse Threat Observatory, listed alphabetically. Each profile collects aliases, MITRE ATT&CK mapping, arsenal and campaigns, detection rules and the indicators of compromise attributed to it.
- late.lol
- The late.lol malware is associated with affiliates known by handles such as @Mr.C, @Empathy, @jayze, @Widow, and @Memory.
- lcryptorx ransomware
- Lcryptorx is a ransomware family known for encrypting data and demanding ransom payments in the financial services and healthcare sectors.
- leak bazaar credential-stealer
- Leak Bazaar is a platform facilitating the sale and distribution of stolen data on the dark web.
- leakeddata credential-stealer
- Leakeddata is a credential-stealer malware that primarily targets financial services, retail, and technology sectors.
- leaknet
- In the cyber-undergrounds, we're exploring shadowed corridors of the digital world in search of inside information.
- lilyofthevalley
- No description is currently available for the malware known as lilyofthevalley.
- limedownloader downloaderloader
- LimeDownloader is a lightweight malware primarily used to download and execute additional malicious payloads.
- limeminer cryptominer
- LimeMiner is a cryptomining malware that can infect systems to mine cryptocurrency without the user's consent.
- linkc backdoorrat
- LinkC is a Remote Access Trojan (RAT) often utilized by advanced persistent threat (APT) groups to gain unauthorized access and control…
- lockbit4 ransomware
- LockBit 4.0 is a variant of ransomware that targets multiple industries worldwide.
- lockbit5 ransomware
- LockBit 5 is a sophisticated ransomware family that targets a wide range of industries by encrypting files and demanding a ransom for…
- lockdata ransomware
- Lockdata is a ransomware strain that encrypts user files to demand a ransom payment for their decryption.
- lockscreen ransomware
- Lockscreen malware is a type of ransomware that restricts access to the user's device by displaying a persistent screen overlay.
- locus backdoor
- Locus is a backdoor malware with limited publicly available information.
- lokilocker ransomwarewiper
- Lokilocker is a ransomware family known for encrypting files and, in certain cases, acting as a wiper by irreversibly deleting data from…
- looChiper ransomware
- LooChiper is a Ransomware. It uses a nice but scary name: LooCipher. The name is at the same time an allusion to its capabilities (thank…
- lorenz ransomware
- Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by…
- losttrust backdoorcredential-stealer
- LostTrust is a sophisticated backdoor malware used in cyber-espionage campaigns.
- lsassDumper credential-stealer
- This in Go written malware is lsass process memory dumper, which was custom developed by threat actors according to Security Joes.
- lsd
- LSD is a malware with insufficient public data available.
- luckbit ransomware
- Luckbit is a form of ransomware that targets financial and technology sectors.
- lukalocker ransomware
- Lukalocker is a ransomware family that encrypts victims' files and demands payment.
- lulzsec muslims ddos
- LulzSec Muslims is associated with the hacktivist group known for launching DDoS attacks, targeting government and media entities.
- lunalock ransomware
- Lunalock is a ransomware family known for encrypting users' data and demanding ransom for decryption keys.
- lynx rat
- Lynx is a remote access Trojan known for its use in cyber espionage campaigns targeting government and telecommunications sectors.
- lynxr rat
- Lynxr is a remote access trojan (RAT) used for cyber espionage activities targeting government, financial, and tech organizations.
- lyrix backdoortrojan
- Lyrix is a backdoor malware family used in cyber-espionage campaigns targeting sensitive sectors such as government and public utilities.
- m0yv virusransomware
- Modular x86/x64 file infector created/used by Maze ransomware developer.
- m3rx trojan
- M3rx is a trojan malware known for clandestine operations typically involving unauthorized access and data exfiltration.
- macOS.OSAMiner cryptominertrojan
- macOS.OSAMiner is a Monero mining trojan that was first observed in 2018; security researchers assessed macOS.OSAMiner may have been…
- mad liberator rat
- Group is also currently known as MADDLL32 and Metatron.
- magecart credential-stealertrojan
- Magecart is a malware framework intended to steal credit card information from compromised eCommerce websites.
- mailto ransomware
- Also known as Koko Ransomware, NetWalker. NetWalker, also known as Mailto or Koko Ransomware, is a ransomware family that has been employed in targeted attacks against various…
- majinahanashi
- malas backdoortrojan
- Malas is a sophisticated backdoor trojan used primarily for cyber espionage activities.
- malek team trojan
- Malek Team is known for cyber espionage activities primarily targeting government and energy sectors in the Middle East.
- malphas rat
- Malphas is a remote access trojan (RAT) used for cyber-espionage, primarily targeting financial services, government, and technology…
- mamona backdoor
- Mamona is a sophisticated malware family known for deploying backdoors to gain unauthorized access to targeted systems.
- mario esxi ransomware
- Mario ESXi is a ransomware family that targets VMware ESXi servers.
- mcafee
- The 'mcafee' entry lacks specific information and may be mistakenly listed or improperly named as a malware.
- mcrypt2019 ransomware
- Mcrypt2019 is a ransomware family identified in mid-2019.
- meek
- meek is an open-source Tor plugin that tunnels Tor traffic through HTTPS connections.
- megaMedusa ddos
- MegaMedusa is NodeJS DDoS Machine Layer-7 provided by RipperSec Team.
- meow
- meowciety403
- metaMain backdoor
- metaMain is a backdoor used by Metador to maintain long-term access to compromised machines; it has also been used to decrypt Mafalda into…
- metaencryptor ransomware
- MetaEncryptor is a ransomware family known for encrypting files on infected systems and demanding a ransom payment for decryption keys.
- miga trojan
- The miga malware, associated with the slogan #MakeIsraelGreatAgain, is suspected to be politically motivated, primarily targeting…
- miliphen
- mim221 spywarecredential-stealer
- MIM221 is a sophisticated malware used primarily for espionage and credential theft.
- mimic backdoorkeylogger
- Mimic is a sophisticated backdoor malware known for its capabilities in cyber espionage.
- mimic-guram ransomware
- Mimic v.10 Ransomware-as-a-Service (RaaS).
- mindware trojanspyware
- Mindware is a sophisticated malware often associated with cyber espionage activities targeting sensitive data from various industries.
- miniBlindingCan ratdownloader
- Also known as AIRDRY.V2, EventHorizon. miniBlindingCan is an HTTP(S) orchestrator.
- miniRAT rat
- miniRAT is a Remote Access Trojan (RAT) used for gaining unauthorized remote access to targeted devices.
- miniTypeFrame rat
- miniTYPEFRAME is a variant of TYPEFRAME, a RAT for Windows.
- minteye
- mnt6
- mnt6 is a malware with limited public information.
- mogilevich
- Mogilevich is a malware entry in the MISP Galaxy database with no available description.
- money message ransomware
- Money Message is a ransomware family known for encrypting files and demanding payment for decryption.
- monolock ransomware
- Monolock is a ransomware family that encrypts victim files and demands a ransom.
- montage
- morpheus rattrojan
- Also known as HellCat. Morpheus, also known as HellCat, is a remote access trojan used by threat actors to conduct cyber-espionage activities.
- mortalkombat ransomware
- Mortalkombat is a ransomware variant first observed in early 2023.
- mortar
- mountlocker ransomware
- MountLocker is a ransomware family known for encrypting victim data and demanding a ransom for decryption.
- mozart loader
- According to PCrisk, Mozart is malicious software that allows attackers (cyber criminals) to execute various commands on an infected…
- ms13-089 exploit-kit
- MS13-089 is a security vulnerability in Microsoft software that could allow remote code execution if a user views a specially crafted…
- muliaka
- The Muliaka malware currently lacks detailed public descriptions and specific information about its targets or capabilities.
- mydata
- The details on the 'mydata' malware are limited, and its specific operations and functionalities remain unclear.
- n0n
- n1n1n1 ransomware
- N1N1N1 is a ransomware strain known for encrypting files and demanding a ransom payment in cryptocurrency.
- nRansom ransomware
- nRansom is a type of ransomware that locks the user's screen and demands payment in an unconventional manner.
- naga backdoor
- Naga is a backdoor malware known for its capabilities of remote access and control.
- nasir security
- Nasir Security is a malware entity with limited available information, making its specifics largely unknown in the threat landscape.
- nblock backdoor
- NBlock is known as a backdoor malware that provides unauthorized access to affected systems.
- nbtstat
- nbtstat is a utility used to troubleshoot NetBIOS name resolution.
- nccTrojan trojan
- nccTrojan is a type of trojan malware designed to perform various illicit activities on compromised systems.
- neshta virus
- Neshta is a 2005 Belarusian file infector virus written in Delphi.
- netrunner rat
- Netrunner is a sophisticated remote access tool utilized for cyber-espionage.
- netsh
- Also known as netsh.exe. netsh is a scripting utility used to interact with networking components on local or remote systems.
- netstat
- netstat is an operating system utility that displays active TCP connections, listening ports, and network statistics.
- ngrok
- ngrok is a legitimate reverse proxy tool that can create a secure tunnel to servers located behind firewalls or on local machines that do…
- nightspire rat
- Nightspire is a remote access trojan predominantly used for cyber espionage.
- nitlove credential-stealertrojan
- Nitlove is a credential-stealing trojan malware that primarily focuses on harvesting login information from infected systems.
- nitrogen backdoorransomware
- Nitrogen is a type of malware used for gaining unauthorized access and executing commands on targeted systems, often seen in cybercrime…
- njRAT rat
- Also known as Njw0rm, LV, Bladabindi. njRAT is a remote access tool (RAT) that was first observed in 2012.
- nmass malware rat
- Nmass malware is a Remote Access Trojan (RAT) built using .NET with a hardcoded encryption key.
- noescape ransomware
- NoEscape is a ransomware family that targets multiple industries, including financial services, government, and healthcare.
- noname
- Noname is a malware entity for which no specific information is currently available.
- nova ransomware
- Nova is a rebranded version of the RALord ransomware, targeting financial and government sectors, predominantly in the United States and…
- nullbulge
- A hacktivist group protecting artists' rights and ensuring fair compensation for their work.
- nvrmre botnettrojan
- nvrmre, also known as Lemon, is a sophisticated botnet malware targeting primarily financial services and technology sectors.
- oRAT rat
- SentinelOne describes this as a malware written in Go, mixing own custom code with code from public repositories.
- obscura backdoortrojan
- Obscura is a stealthy backdoor Trojan that provides remote access to compromised systems.
- obsidian orb
- oceans
- The oceans malware is a sophisticated and potentially modular threat with capabilities yet to be fully understood.
- octovillan trojanransomware
- Octovillan is a sophisticated piece of malware designed to target financial and governmental sectors.
- of Ransomware: OpenToYou (Formerly known as OpenToDecrypt) ransomware
- This ransomware is originated in English, therefore could be used worldwide.
- offwhite
- Offwhite is a lesser-known malware with limited information available.