Malware Families page 63 of 63
6,272 malware families profiled on the Maltiverse Threat Observatory, listed alphabetically. Each profile collects aliases, MITRE ATT&CK mapping, arsenal and campaigns, detection rules and the indicators of compromise attributed to it.
- vect ratloader
- Vect is a remote access tool (RAT) known for its stealthy loading capabilities.
- vexy
- virdetdoor backdoor
- Virdetdoor is a backdoor malware designed to provide unauthorized remote access to compromised systems.
- vjw0rm 0.1 wormratddos
- Also known as Vengeance Justice Worm, VJw0rm, VJwOrm. “Vengeance Justice Worm” was first discovered in 2016 and is a highly multifunctional, modular, publicly available “commodity malware”…
- vladivostok
- vo1d botnet
- According to Xlab, this malware is used to compromise Android TVs and set-top boxes, and its corresponding botnet had more than 1 million…
- vulcan ransomware
- Vulcan is a ransomware family known for targeting critical infrastructure sectors such as government, energy, and aerospace.
- vxLock ransomware
- vxLock is a ransomware that encrypts files on a victim's machine and demands a ransom for decryption.
- vxRat rat
- vxRat is a remote access tool used for cyber espionage, primarily targeting government and technology sectors.
- vypr
- w32times trojan
- w32times is a Windows-based trojan used for unauthorized access and data exfiltration.
- w3crypto cryptominer
- W3crypto is a cryptocurrency mining malware that exploits system resources to mine cryptocurrencies, often targeting financial services…
- wAgentTea downloader
- Also known as wAgent. wAgentTea is an HTTP(S) downloader. It was deployed mostly against South Korean targets like a pharmaceutical company (Q4 2020) or…
- waissbein backdoortrojan
- Waissbein is a sophisticated backdoor trojan used in targeted attacks primarily against government, financial services, and technology…
- wallstreet
- walocker ransomware
- Walocker is a ransomware strain known for targeting logistics and supply chain companies, encrypting files and demanding ransom for…
- warlock rattrojan
- Warlock is a remote access trojan used to target financial and governmental institutions.
- weaxor rat
- Weaxor is a Remote Access Trojan (RAT) primarily used for gaining unauthorized access and control over compromised machines.
- werewolves trojanransomware
- Werewolves is a malware family known for targeting energy and financial sectors, primarily in the US and Russia.
- weyhro
- Appears to be a Data Extortion group with no encryption.
- white lock
- wiki ransomware ransomware
- Wiki ransomware is a malicious software variant designed to encrypt files on the victim's machine and demand a ransom for decryption.
- wikileaksv2 rat
- WikileaksV2 is a Remote Access Trojan (RAT) associated with the Qilin group, known for targeting government and media sectors.
- win.JobCrypter ransomware
- JobCrypter is a ransomware targeting Windows systems, known for encrypting files and demanding a ransom in cryptocurrency.
- win.beast ransomware
- Also known as blacklockbit. Beast is a Ransomware-as-a-service (RaaS) product which provides functionality such as SMB scanning, file encryption, service and process…
- win.fujinama credential-stealerkeyloggerscreen-capture
- Fujinama is a custom VB info stealer capable to execute custom commands and custom exfiltrations, keylogging and screenshot.
- win.ghostengine backdoorrat
- Win.GhostEngine is a Remote Access Trojan used primarily for cyber-espionage purposes, with capabilities to infiltrate and control target…
- win.icexloader downloaderloader
- IceXLoader is a commercial malware used to download and deploy additional malware on infected machines.
- win.innfirat backdoorcredential-stealerkeylogger
- InnifiRAT is coded in .NET and targets personal data on infected devices, with it's top priority appearing to be bitcoin and litecoin…
- win.pyfiledel wiperworm
- Py2exe built worm propagating via USB drives, having wiper features embedded in the logic (based on today's date being later than…
- win.rekoobe trojanbackdoor
- Also known as tinyshell.win, tshd.win. A Trojan for Winows with the same code structure and functionalities of elf.rekoobe, for Linux environment instead.
- win.wabot worm
- Wabot is an IRC worm that propagates through networks using the IRC protocol.
- winlog credential-stealer
- Winlog is a credential-stealing malware particularly used in targeted attacks against government and financial sectors.
- wiper leak wiper
- Wiper Leak is a malicious software variant that focuses on destroying or wiping data on compromised systems.
- witchcoven ratspyware
- Witchcoven is a remote access tool (RAT) used for cyber-espionage activities, primarily targeting financial services and government…
- woody backdoorrat
- Woody is a backdoor and remote access trojan (RAT) primarily used in cyber espionage campaigns targeting government and energy sectors in…
- worldleaks
- Worldleaks is a malware family potentially involved in data breaches.
- x4 ratspyware
- x4 is an advanced remote access trojan (RAT) that targets government and technology sectors to conduct cyber-espionage.
- xCaon backdoor
- xCaon is an HTTP variant of the BoxCaon malware family that has used by IndigoZebra since at least 2014.
- xCmd
- xCmd is an open source tool that is similar to PsExec and allows the user to execute applications on remote systems.
- xHacker Pro RAT rat
- xHacker Pro RAT is a remote access tool used for cyber espionage.
- xHelper trojandownloader
- Xhelper is a very persistent malware that can reinstall itself after factory reset, Xhelper downloads malicious apps and displays annoying…
- xPack loader
- Also known as NERAPACK. Symantec describes this as a decryptor/loader used by Chinese threat actor Antlion in campaigns targeting Taiwan.
- xXLecXx ransomware
- xXLecXx is a type of ransomware that encrypts files on the victim's computer and demands payment to restore access.
- xdr33 backdoor
- According to 360 netlab, this backdoor was derived from the leaked CIA Hive project.
- xelera trojanspyware
- Xelera is a malware trojan known for its capabilities in surveillance and data theft.
- xleaks credential-stealerspyware
- Xleaks is a malware used primarily for stealing credentials and spying on targeted systems.
- xmrig cryptominer
- According to PCrisk, XMRIG is a completely legitimate open-source application that utilizes system CPUs to mine Monero cryptocurrency.
- xollam backdoortrojan
- Xollam is a backdoor trojan used to gain unauthorized access to targeted systems.
- xp95
- xpl0itrs
- xsPlus ratbackdoor
- Also known as nokian. xsPlus, also known as nokian, is a remote access trojan (RAT) deployed primarily against government and technology sectors.
- xxmm rootkittrojan
- Also known as ShadowWalker. XXMM, also known as ShadowWalker, is a sophisticated malware known for its rootkit capabilities targeting government and financial sectors.
- xzbot backdoor
- Also known as xzorcist. A backdoor brought into version 5.6.0 and 5.6.1 of compression library/tool xz/liblzma, which was intended to enable access via (Open)SSH…
- yayih rat
- Also known as aumlib, bbsinfo. Yayih is a remote access trojan (RAT) known for targeting governmental and telecommunications sectors, particularly in East Asia.
- ymir backdoorrat
- Ymir is a sophisticated remote access tool often leveraged in cyber espionage campaigns against governmental and industrial targets.
- yty backdoorrat
- yty is a modular, plugin-based malware framework.
- yty rat
- Yty is an advanced remote access tool (RAT) known for its stealthy capabilities and targeted cyber-espionage operations.
- yurei rat
- Yurei is a remote access trojan (RAT) notable for targeting entities primarily in Japan.
- zScreenLocker Ransomware ransomware
- This is most likely to affect English speaking users, since the note is written in English.
- zawoo
- zenar trojan
- Zenar is a type of trojan malware known to target multiple industries.
- zeon ransomware
- Zeon is a ransomware family known for its aggressive encryption tactics and extortion of organizations across multiple sectors.
- zeoticus2 ransomware
- Zeoticus2 is a variant of ransomware that encrypts victims' files and demands a ransom for decryption.
- zerolockersec ransomware
- Zerolockersec is a ransomware family that encrypts the victim's files and demands payment in cryptocurrency.
- zeta leaks credential-stealerspyware
- Zeta Leaks is a sophisticated cyber-espionage malware known for targeting sensitive sectors such as financial services and government…
- zetarink rat
- Zetarink is a remote access trojan (RAT) known for targeting government and financial sectors.
- zgRAT ratcredential-stealerdropper
- zgRAT is a Remote Access Trojan malware which sometimes drops other malware such as AgentTesla malware.
- zircon trojanrat
- Zircon is a sophisticated Remote Access Trojan used primarily for cyber-espionage purposes.
- zixer2 ransomware
- Zixer2 is a ransomware family known for encrypting user files and demanding a ransom for decryption.
- zola trojancredential-stealer
- Zola is a trojan primarily targeting financial services, known for its capability to steal credentials.
- zwShell rat
- zwShell is a remote access tool (RAT) written in Delphi that has been seen in the wild since the spring of 2010 and used by threat actors…