top of page
Malware Tracker
2020
January |
|---|
Saigon |
Trickbot |
Shopaholic |
Applejeus |
Bronze President |
Amadey |
Sidewinder |
Frenchy |
Muhstik |
Vivin |
NOTROBIN |
Liquorbot |
Predator the Thief |
.IMG Files |
Web Swiper |
Jhonerat |
Shlayer |
Emotet |
CryptoApi Exploit |
Aggah |
February |
|---|
HopLight |
Emotet |
BistroMath |
BuffetLine |
TrickBot |
ObliqueRat |
IcedID |
AZORult |
Outlaw Kit |
SlickShoes |
Multicomponent Miner |
QBot |
Lokibot |
Fake Interview |
Artfulpie |
Trickbot |
KBot |
Malicious Android Apps |
CrowdedFlounder |
HOTCROISSANT |
Loda |
VipersoftX |
Roaming Mantis |
March |
|---|
Vicious Panda |
Mokes and Buerak |
Bisonal |
TrickBot |
Coronavirus scams |
Rocket Loader |
Geost |
April |
|---|
Gamaredon |
APT41 |
Coinminer |
Vollgar |
HawkEye |
AZORult and NanoCore |
ShellBot |
Kinsing |
NetWire |
DealPly, IsErIk, and ManageX |
APT32 |
Coronavirus scams |
PoetRat |
AgentTesla |
May |
|---|
TrickBot |
June |
|---|
Cobalt Strike |
Acidbox |
IRCflu and Interplanetary Storm |
Valak |
Fake Job Application |
Barcode Reader Adware Apps |
BLM |
Microcin |
Redcore and Bluecore |
ActionSpy |
Tekya |
TrickBot |
Higaisa |
QBot |
July |
|---|
Smartphone Adware |
Mata |
Joker |
Cybergate |
August |
|---|
Data Not Available |
Page 1 of 1
September |
|---|
Data Not Available |
Page 1 of 1
October |
|---|
Data Not Available |
Page 1 of 1
November |
|---|
Data Not Available |
Page 1 of 1
December |
|---|
Data Not Available |
Page 1 of 1
Load More:
2019
2018
2017
2019
January |
|---|
Ursnif |
African Financial Attacks |
Mjag |
Golang Stealer |
MOBSTSPY |
Hancitor (FedEx Theme) |
AV Tech Support Scam |
Roma225 |
Imminent |
Anubis |
Hakai & Yowai |
Fallout EK |
Nanocore |
February |
|---|
Smoke Loader |
Colombian Govt Attacks |
Emotet (MS Word) |
FTP Info Stealer |
March |
|---|
Buhtrap |
WordPress SMTP Exploit |
Gh0stRAT |
MechaFlounder |
Rocke Golang |
Lazarus Miner |
PirateMatryoshka |
WinRAR Zero-day |
StealthWorker |
BOM Banking RAT |
Lokibot |
Lucky Elephant |
NetWire |
Danabot |
Emotet |
Whitefly Espoinage |
Fileless Brazil Banking Trojan |
Trickbot Remote App Variant |
Slub |
GlitchPOS |
April |
|---|
ElectrumDosMiner |
Hancitor (Docusign Theme) |
Beapy |
Monero Miner |
May |
|---|
Qakbot |
Scarcruft |
Jasperloader |
Blackwater |
ELLECTRICFISH |
Magento-analytics |
SystemdMiner |
Trickbot |
IcedID |
ICEDID |
Formbook |
Redux |
June |
|---|
XmRig |
Ngoiweb |
GoldBrute |
e-Procurement Impersonation |
Monero |
Felipe |
Hawkeye |
Korean Gambling |
July |
|---|
IcedID |
Ursnif |
Topinambour |
TONEDEAF |
Miori |
Slub |
txHollower |
SWEED Agent Tesla |
Extenbro |
MobonoGram |
16Shop |
August |
|---|
BalkanRAT |
Baldr |
Danabot |
Trickbot |
Gamaredon |
Emptiness |
Remcos |
Gwmndy |
Lookback |
Tricky Chinese |
China Chopper and HIGHNOON |
Bitter |
VBShower |
MedusaHTTP |
SystemBC |
Saefko |
XRAT |
Magento |
Agent 1433 |
Asruex |
September |
|---|
Netwire |
PcShare |
Joker |
FunkyBot |
Tortoiseshell |
Zebrocy |
Divergent |
Trickbot |
Whiteshadow |
Moobot_fbot_handymanny |
Iserik |
Ghostminer |
Emotet |
Remcos |
Lokibot |
Ostap |
Amadey |
Stockfolio.app |
Tricky LNK |
Brata |
Tesla |
Skidmap |
DealPly |
Rig EK |
Dtrack |
Magecart |
Innfirat |
Domen |
Nodersok |
October |
|---|
Magecart |
Xhelper |
Malicious VBS |
Emotet |
Gustuff |
LOWKEY |
Nukesped |
WAV File loaders |
Neshta |
DHL Delivery Notification |
Boostwrite and RDFSniffer |
Skip-2.0 |
Remcos |
Vidar |
Phorpiex |
Graboid |
NetSupport |
Smominru |
Hancitor |
Nodster |
Badpatch |
Trojanized tor browser |
Mustang Panda |
Checkrain |
November |
|---|
Bluekeep Exploit |
Hide and Seek |
Gafgyt |
Roboto |
Cerberus |
RevengeRAT |
Capesand |
APT33 |
PSP Phishing |
LOLBins |
Emotet |
Netsuppport |
Magento and Wordpress skimmer |
DarkUniverse |
WizardOpium |
Titanium |
December |
|---|
Stalkerware Apps |
Stalkerware |
TrickBot |
Wocao |
Capesand |
Monero |
IcedID |
Waterbear |
Lampion |
Pyxie |
Mozi |
Dacls RAT |
BlueHero |
Ursnif |
Agent Tesla |
Spelevo |
Poetic |
Emotet |
Bioload |
Trickbot |
Poison Frog |
2018
January |
|---|
Skygofree |
Zyklon |
OSX_MaMi |
February |
|---|
Sofacy |
March |
|---|
MsraMiner |
Redis.Miner |
Sanny |
Panda Banker |
Fauxpersky |
Hancitor |
QuantLoader |
GoScanSSH |
Geodo/Emotet |
TeleRat |
HenBox |
Poison IVY |
9002 |
Zupdax |
PlugX |
BlackTDS |
April |
|---|
RadRat |
GhostSecret |
GravityRAT |
Rubella Macro Kit |
Necurs |
Trickbot |
Stresspaint |
APT34 |
Metamorfo |
Bitvote Cryptominer |
DHL-THEMED MALSPAM |
Muhstik |
Energetic Bear |
RETADUP |
Hancitor (Malspam) |
Kwampirs (Orangeworm) |
Bandios |
IcedID |
Roaming Mantis |
OceanLotus |
Salgorea |
GhostMiner |
Rarog Cryptominer |
May |
|---|
Emotet |
VPNFilter |
NavRat |
BackSwap |
Mirai (GPON Exploit) |
Telegrab |
Grobios |
Vega Stealer |
Muhstik (GPON exploit) |
Maikspy |
Kuik |
Hide N Seek |
Winnti |
June |
|---|
LANDFALL |
Necurs (XMRig Payload) |
TrickBot (Sage Invoice) |
KHRAT |
RANCOR |
Operation Star Cruiser |
URLZone |
LuckyMouse |
Pbot |
Necurs (.iqy) |
MuddyWater |
Drupal CVE-2018-7602 (Monero Miner) |
Android Battery Saving Scam |
Necurs (Ursnif Payload) |
Emotet (ICEDID Payload) |
Kardon Loader |
GZipDe |
BackSwap |
Emotet |
InvisiMole |
Satori |
TYPEFRAME |
MirageFox |
Prowli |
July |
|---|
Emotet (Trickbot + Zeus Panda) |
FelixRoot |
PowerGhost |
Micropsia |
Supply Chain Attack |
DarkHydrus (.iqy) |
Hidden Bee |
Parasite HTTP RAT |
Kronos (Reborn) |
IPhone MDM attack (Part 2) |
Hide N Seek |
Satori (Android) |
Ammyy (SettingContent-MS) |
BTC Stealer |
Emotet (Zues Panda Payload) |
Hancitor (AZORULT AND ZEUS Payload) |
Quasar Sobaken Vermin |
Ammyy (FIFA WC Theme) |
Blackgear Cyberespionage |
August |
|---|
BusyGasper |
Lokibot |
Monero Miner |
BackSwap |
CeidPageLock |
AcridRain |
PseudoGate |
Asacub |
BondPath |
PeaRAT |
Remcos |
Dark Tequila |
WP Redirect Campaign |
AdvisorsBot |
BEBLOH and URSNIF |
AppleJeus |
Anubis |
Bank Malspam (.PUB) |
Hancitor (Zues Panda) |
Trickbot (DC Infection) |
VBEtaly |
Emotet (Zues Panda) |
MARAP |
UAF Vulnerability (CVE-2018-8373) |
Osiris |
AdKoob |
KEYMARBLE |
XMRIG |
HOOKADS (AZORULT) |
Hidden Devil |
ICS Attack (RMS and TeamViewer) |
September |
|---|
MadoMiner |
Kodi add-on (Cryptominer) |
BONDUPDATER |
CobInt |
Partnerstroka |
HWP |
Menupass (APT10 Attack) |
LuckyMouse |
Mirai and Gafgyt |
PowerPool (Win ALPC Zero-day) |
October |
|---|
TSCookie |
GPlayed Banking |
MadoMiner |
CoinTicker |
DemonBot |
Docker Cryptominer |
Trump’s_Attack_on_Syria |
GreyEnergy |
Saskmade Tech Support Scam |
Cobalt Commodity Attack |
Bushido |
Brazil Malspam |
Tick |
Trickbot (Azorult) |
Nymaim |
MuddyWater |
iTranslator |
Agent Tesla |
Octopus |
FakeMiner (Andriod) |
Hancitor (Zues Panda) |
LoJax |
Magecart Theft |
FAKE UPDATER |
FallOut (EK) |
GPlayed |
REDAMAN |
November |
|---|
AutoCAD Malware |
MartymcFly |
Outlaw Cryptominer |
WebCobra |
BONDUPDATER |
EMOTET (using XML Files) |
DDG v3014 |
Loki |
tRAT |
FastCash |
Muhstik (phpMyAdmin Variant) |
Hide and Script |
Windows Installer Miner |
Trickbot |
DanaBot |
URSNIF |
Malicious InPage document |
JexBoss |
Emotet |
Mystery Baby |
POWERSHOWER |
Movil Secure |
Persian Stalker |
Metamorfo |
TRITON |
TrickBot (with pwgrab) |
December |
|---|
Malicious Memes |
Emotet (QAKBOT) |
Shamoon3 |
Novidade |
Stolen Pencil |
2017
January |
|---|
February |
|---|
March |
|---|
April |
|---|
May |
|---|
June |
|---|
July |
|---|
August |
|---|
September |
|---|
October |
|---|
November |
|---|
December |
|---|
TRITON |
bottom of page

