Malware Families
Malware families tracked across abuse.ch ThreatFox, MalwareBazaar and URLhaus. Each family links to its observed indicators of compromise — domains, IPs, URLs and file hashes — and the CVEs it is seen exploiting.
Families tracked
283
Attributed indicators
29,547
Most active
ClearFake
ClearFake8,211 IOCsUnknown malware2,346 IOCsCobalt Strike2,101 IOCsVidar1,304 IOCsUnknown Stealer1,086 IOCsMetaStealer1,001 IOCsVShell978 IOCsIClickFix966 IOCsRemcos737 IOCsMirai694 IOCsAsyncRAT496 IOCsRemus474 IOCsAkira406 IOCsUnknown Loader403 IOCsNetWire RC369 IOCsStrelaStealer358 IOCsTriada348 IOCsAdaptixC2342 IOCsValleyRAT265 IOCsCoinminer261 IOCsstealler261 IOCsRedTail245 IOCsKongTuke225 IOCsNanocore RAT213 IOCsDCRat200 IOCsKuiper192 IOCsFormbook187 IOCsPureRAT181 IOCsSliver177 IOCsVenus Stealer168 IOCsStealc167 IOCsXMRIG165 IOCsQuasar RAT158 IOCsUnknown RAT147 IOCsAgent Tesla142 IOCsHavoc141 IOCsSalatStealer132 IOCsWannaCryptor129 IOCsNetSupportManager RAT121 IOCsKimwolf120 IOCsLumma Stealer116 IOCsXWorm112 IOCsEvilginx110 IOCsAisuru99 IOCsNjRAT96 IOCsmagecart96 IOCsCrossRAT78 IOCsSmartApeSG77 IOCsACR Stealer63 IOCsFAKEUPDATES61 IOCsAMOS60 IOCsSectopRAT58 IOCsLatrodectus53 IOCsMeterpreter51 IOCsGhost RAT43 IOCsLuca Stealer42 IOCsCreal Stealer42 IOCsBlankGrabber39 IOCsPureLogs Stealer38 IOCsRhysida35 IOCsChaos34 IOCsDarkTortilla33 IOCsPhantom Stealer33 IOCsBianLian31 IOCsCoinMiner31 IOCsMozi31 IOCsDeimosC230 IOCsMaskGramStealer30 IOCsDeerStealer29 IOCsPhorpiex28 IOCsRansomHub28 IOCsConnectWise27 IOCsRatonRAT27 IOCsGentlemen27 IOCsGCleaner26 IOCsDanaBot25 IOCsAgentTesla24 IOCsTinyMet24 IOCsAmadey23 IOCsBumbleBee23 IOCspupy22 IOCsBrute Ratel C421 IOCsTsundere21 IOCsHijackLoader20 IOCsRhadamanthys20 IOCsRedLine Stealer19 IOCsOverlord RAT19 IOCsKimsuky19 IOCsLockBit19 IOCsUnknown Webinject17 IOCsEye Pyramid16 IOCsGafgyt16 IOCsSocks5 Systemz16 IOCsRemcosRAT15 IOCsTofsee15 IOCsStarLoader15 IOCsXtreme RAT15 IOCsCountLoader15 IOCsGUIDLOADER15 IOCsRemusStealer14 IOCsAve Maria14 IOCsEtherRAT14 IOCsBeaverTail14 IOCsVjw0rm13 IOCsTsunami13 IOCsArkei Stealer12 IOCsLALALA Stealer12 IOCsSnappyClient12 IOCsPrometei11 IOCsBADBOX11 IOCsRevStealer11 IOCsTonRAT11 IOCsPerlBot11 IOCs5.t Downloader10 IOCsInvisibleFerret10 IOCsWannaCry10 IOCsCobaltMirage FRP10 IOCsKV10 IOCsEmpire Downloader9 IOCsFaceStealer9 IOCstroystealer9 IOCsvo1d9 IOCsFireCrypt9 IOCsTaurus Stealer9 IOCsClipper9 IOCsMintsLoader9 IOCsWebMonitor RAT9 IOCsXloader9 IOCsDOSTEALER9 IOCsQakBot8 IOCsDeimos8 IOCsSmokeLoader8 IOCsdonut_injector8 IOCsSystemBC7 IOCsNetSupport7 IOCsMASS Logger7 IOCsCASTLELOADER7 IOCsHook7 IOCsKinsing7 IOCsSatacom7 IOCsDarkComet7 IOCsCrossLock7 IOCsShadowPad7 IOCsGHOSTBLADE6 IOCsQuantLoader6 IOCsposcardstealer6 IOCsBlackShades6 IOCsLumar6 IOCsEarthworm6 IOCsDonutLoader6 IOCsSocks5Systemz6 IOCsSTRRAT6 IOCsKrakenKeylogger6 IOCsPhemedrone Stealer6 IOCsOrcus RAT6 IOCsRemoteX6 IOCsBashlite6 IOCsFicker Stealer5 IOCsXenoRAT5 IOCsXOR DDoS5 IOCsRustyStealer5 IOCsPoshC25 IOCsCoreshell5 IOCsNgioweb4 IOCsnjrat4 IOCsViper RAT4 IOCsSPICA4 IOCsLoki Password Stealer (PWS)4 IOCsBlackMatter4 IOCsNanoCore4 IOCs4h_rat4 IOCsPureLogsStealer4 IOCsCryptoRansomeware4 IOCsTinyLoader4 IOCsDofloo4 IOCsZloader4 IOCsHades3 IOCsDarkMe3 IOCsN-W0rm3 IOCsZeus3 IOCsX-Agent3 IOCsRapidStealer3 IOCsMooBot3 IOCsTeslaCrypt3 IOCsYTStealer3 IOCsVENON3 IOCsQuirkyLoader3 IOCsPXA Stealer3 IOCsCobaltStrike3 IOCsServHelper3 IOCsYiBackdoor3 IOCsVoltStealer3 IOCsTimbreStealer3 IOCsZHtrap3 IOCsPureland3 IOCsMimiKatz3 IOCsGhostSocks3 IOCspurpleink3 IOCsGootKit3 IOCsCraxsRAT3 IOCs
CVE Database
Vulnerabilities with CVSS, EPSS, KEV and malware correlation
Check an indicator
Look up a domain, IP, URL or hash in real time