Malware Families

Malware families tracked across abuse.ch ThreatFox, MalwareBazaar and URLhaus. Each family links to its observed indicators of compromise — domains, IPs, URLs and file hashes — and the CVEs it is seen exploiting.

Families tracked

273

Attributed indicators

26,908

Most active

ClearFake

ClearFake7,624 IOCs Unknown malware2,223 IOCs Cobalt Strike2,075 IOCs Vidar1,204 IOCs Unknown Stealer1,067 IOCs VShell953 IOCs IClickFix910 IOCs Remcos717 IOCs Mirai654 IOCs Remus471 IOCs AsyncRAT443 IOCs Akira406 IOCs Unknown Loader383 IOCs NetWire RC363 IOCs StrelaStealer358 IOCs Triada348 IOCs AdaptixC2321 IOCs stealler261 IOCs Coinminer246 IOCs RedTail245 IOCs ValleyRAT244 IOCs Nanocore RAT213 IOCs DCRat184 IOCs Sliver175 IOCs PureRAT173 IOCs KongTuke169 IOCs Stealc167 IOCs XMRIG165 IOCs Formbook163 IOCs Quasar RAT154 IOCs Venus Stealer147 IOCs Havoc134 IOCs Kuiper132 IOCs Unknown RAT131 IOCs SalatStealer129 IOCs WannaCryptor126 IOCs Agent Tesla125 IOCs NetSupportManager RAT120 IOCs Lumma Stealer116 IOCs XWorm107 IOCs Kimwolf100 IOCs NjRAT96 IOCs Evilginx95 IOCs magecart80 IOCs CrossRAT78 IOCs Aisuru78 IOCs SmartApeSG69 IOCs ACR Stealer63 IOCs SectopRAT58 IOCs AMOS57 IOCs FAKEUPDATES55 IOCs Luca Stealer42 IOCs Ghost RAT40 IOCs BlankGrabber39 IOCs Meterpreter37 IOCs Rhysida35 IOCs Chaos33 IOCs Creal Stealer33 IOCs Mozi31 IOCs CoinMiner31 IOCs PureLogs Stealer31 IOCs MaskGramStealer30 IOCs DarkTortilla30 IOCs DeerStealer29 IOCs RansomHub28 IOCs DeimosC228 IOCs ConnectWise27 IOCs Gentlemen27 IOCs BianLian27 IOCs RatonRAT26 IOCs GCleaner26 IOCs Phantom Stealer26 IOCs DanaBot24 IOCs AgentTesla24 IOCs TinyMet24 IOCs BumbleBee23 IOCs Amadey23 IOCs pupy22 IOCs Rhadamanthys20 IOCs Brute Ratel C420 IOCs Overlord RAT19 IOCs LockBit19 IOCs Kimsuky19 IOCs HijackLoader18 IOCs Tsundere18 IOCs RedLine Stealer18 IOCs Latrodectus17 IOCs Eye Pyramid16 IOCs Socks5 Systemz16 IOCs Gafgyt16 IOCs CountLoader15 IOCs Xtreme RAT15 IOCs Tofsee15 IOCs Unknown Webinject15 IOCs StarLoader15 IOCs BeaverTail14 IOCs RemusStealer14 IOCs RemcosRAT14 IOCs EtherRAT14 IOCs Tsunami13 IOCs GUIDLOADER12 IOCs SnappyClient12 IOCs Ave Maria11 IOCs PerlBot11 IOCs Prometei11 IOCs RevStealer11 IOCs BADBOX11 IOCs KV10 IOCs CobaltMirage FRP10 IOCs Vjw0rm10 IOCs Phorpiex10 IOCs WannaCry10 IOCs Arkei Stealer9 IOCs Taurus Stealer9 IOCs 5.t Downloader9 IOCs DOSTEALER9 IOCs Empire Downloader9 IOCs FireCrypt9 IOCs troystealer9 IOCs vo1d9 IOCs Xloader9 IOCs Clipper9 IOCs SmokeLoader8 IOCs QakBot8 IOCs Deimos8 IOCs donut_injector8 IOCs CASTLELOADER7 IOCs ShadowPad7 IOCs Kinsing7 IOCs SystemBC7 IOCs DarkComet7 IOCs NetSupport7 IOCs CrossLock7 IOCs Satacom7 IOCs Hook7 IOCs Orcus RAT6 IOCs WebMonitor RAT6 IOCs Earthworm6 IOCs RemoteX6 IOCs Socks5Systemz6 IOCs poscardstealer6 IOCs Lumar6 IOCs DonutLoader6 IOCs GHOSTBLADE6 IOCs QuantLoader6 IOCs STRRAT6 IOCs BlackShades6 IOCs Phemedrone Stealer6 IOCs LALALA Stealer6 IOCs XenoRAT5 IOCs RustyStealer5 IOCs Ficker Stealer5 IOCs XOR DDoS5 IOCs PoshC25 IOCs Coreshell5 IOCs NanoCore4 IOCs SPICA4 IOCs CryptoRansomeware4 IOCs MetaStealer4 IOCs Loki Password Stealer (PWS)4 IOCs Zloader4 IOCs njrat4 IOCs 4h_rat4 IOCs Ngioweb4 IOCs Dofloo4 IOCs MASS Logger4 IOCs Viper RAT4 IOCs TinyLoader4 IOCs PureLogsStealer4 IOCs Supper3 IOCs XoriumStealer3 IOCs Loki3 IOCs QvoidStealer3 IOCs MimiKatz3 IOCs Venom RAT3 IOCs Zeus3 IOCs Zedhou3 IOCs QuirkyLoader3 IOCs Attor3 IOCs BackNet3 IOCs YTStealer3 IOCs purpleink3 IOCs DarkMe3 IOCs KrakenKeylogger3 IOCs TimbreStealer3 IOCs GootKit3 IOCs Krasue RAT3 IOCs Easy Stealer3 IOCs ServHelper3 IOCs RapidStealer3 IOCs SVCStealer3 IOCs Gh0stnet3 IOCs skyrat3 IOCs GhostSocks3 IOCs Redosdru3 IOCs YiBackdoor3 IOCs Bashlite3 IOCs CraxsRAT3 IOCs Metaencryptor3 IOCs QuasarRAT3 IOCs

CVE Database

Vulnerabilities with CVSS, EPSS, KEV and malware correlation

Check an indicator

Look up a domain, IP, URL or hash in real time