Difference between revisions of "Main Page"
Jump to navigation
Jump to search
(→S) |
|||
| (71 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
__NOTOC__ | __NOTOC__ | ||
== Introduction == | == Introduction == | ||
This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). | This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully [http://blog.crimenumerique.fr/2015/11/21/lutte-contre-les-botnets/ defended in November 2015 in Paris], France. But work continues... | ||
== Botnets == | == Botnets == | ||
{{Div col|3}} | {{Div col|3}} | ||
=== A === | === A === | ||
* [[AbaddonPOS]] | |||
* [[Accdfisa]] | * [[Accdfisa]] | ||
* [[Acebot]] | * [[Acebot]] | ||
| Line 18: | Line 17: | ||
* [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]] | * [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]] | ||
* [[Ainslot]] | * [[Ainslot]] | ||
* [[Akbot]] / Qakbot, Pinkslipbot, Qbot | * [[Akbot]] / [[Qakbot]], [[Pinkslipbot]], [[Qbot]] | ||
* [[Aldi]] | * [[Aldi]] | ||
* [[Alebrije]] | * [[Alebrije]] | ||
| Line 26: | Line 25: | ||
* [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]] | * [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]] | ||
* [[Americana Dreams]] | * [[Americana Dreams]] | ||
* [[Andromeda]] / [[Gamarue]] | * [[Andromeda]] / [[Gamarue]] | ||
* [[AnnLoader]] | * [[AnnLoader]] | ||
| Line 45: | Line 43: | ||
* [[Bamital]] | * [[Bamital]] | ||
* [[Barracuda]] | * [[Barracuda]] | ||
* [[Bashlight]] | |||
* [[Bedep]] | |||
* [[Beebone]] / [[Symmi]], [[Changeup]], [[Vobfus]] | |||
* [[Bereb]] / Related to [[Kiribot]] | * [[Bereb]] / Related to [[Kiribot]] | ||
* [[BernhardPOS]] | * [[BernhardPOS]] | ||
| Line 50: | Line 51: | ||
* [[BlackPOS]] / [[Dump Memory Grabber]] | * [[BlackPOS]] / [[Dump Memory Grabber]] | ||
* [[BlackShades]] | * [[BlackShades]] | ||
* [[Bmaster]] | |||
* [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]] | * [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]] | ||
* [[Bomba Locker]] | * [[Bomba Locker]] | ||
| Line 60: | Line 62: | ||
* [[Carbanak]] | * [[Carbanak]] | ||
* [[Carberp]] / [[Caberp]], [[Syscron]] | * [[Carberp]] / [[Caberp]], [[Syscron]] | ||
* [[Carna]] | |||
* [[Casier]] | * [[Casier]] | ||
* [[Cbeplay.P]] | * [[Cbeplay.P]] | ||
* [[Cerber]] | |||
* [[Cerberus]] | * [[Cerberus]] | ||
* [[Chameleon]] | * [[Chameleon]] | ||
* [[ChewBacca]] | * [[ChewBacca]] | ||
* [[Chidol]] | * [[Chidol]] | ||
* [[Chthonic]] | |||
* [[Cimbot]] | * [[Cimbot]] | ||
* [[Citadel]] | * [[Citadel]] | ||
* [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]] | * [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]] | ||
* [[Coinbitclip]] | |||
* [[CoinVault]] | |||
* [[Comfoo]] | * [[Comfoo]] | ||
* [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]] | * [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]] | ||
* [[CoreBot]] | |||
* [[Coreflood]] | * [[Coreflood]] | ||
* [[Coverton]] | |||
* [[Cridex]] / [[Bugat]], [[Feodo]] | * [[Cridex]] / [[Bugat]], [[Feodo]] | ||
* [[Critroni]] / [[CTB-Locker]] | * [[Critroni]] / [[CTB-Locker]] | ||
* [[Cryakl]] / [[Fantomas]] | |||
* [[CryptoDefense]] | * [[CryptoDefense]] | ||
* [[CryptoLocker]] | * [[CryptoLocker]] | ||
* [[Cryptoblocker]] | * [[Cryptoblocker]] | ||
* [[CryptXXX]] | |||
* [[Cutwail]] / [[Pandex]], [[Mutant]] | * [[Cutwail]] / [[Pandex]], [[Mutant]] | ||
* [[Cythosia]] | * [[Cythosia]] | ||
| Line 85: | Line 96: | ||
* [[Dark-Mailer]] | * [[Dark-Mailer]] | ||
* [[DarkComet]] | * [[DarkComet]] | ||
* [[DarkMegi]] | |||
* [[Darkness]] / [[Optima]], [[Votwup]] | * [[Darkness]] / [[Optima]], [[Votwup]] | ||
* [[Decebal]] | * [[Decebal]] | ||
| Line 90: | Line 102: | ||
* [[Devdar]] | * [[Devdar]] | ||
* [[Dexter]] | * [[Dexter]] | ||
* [[Dharma]] | |||
* [[Dirt Jumper]] | * [[Dirt Jumper]] | ||
* [[Disker]] | * [[Disker]] | ||
| Line 114: | Line 127: | ||
* [[Fakavalert]] | * [[Fakavalert]] | ||
* [[FakeM]] | * [[FakeM]] | ||
* [[ | * [[Feederbot]] | ||
* [[Festi]] | * [[Festi]] | ||
* [[Fivetoone]] / [[DMSpammer]] | * [[Fivetoone]] / [[DMSpammer]] | ||
| Line 122: | Line 135: | ||
* [[Flimrans]] | * [[Flimrans]] | ||
* [[Foag]] | * [[Foag]] | ||
* [[Forbot]] | |||
* [[FrameworkPOS]] | |||
* [[Frutas]] | * [[Frutas]] | ||
* [[Fuflo]] | * [[Fuflo]] | ||
| Line 140: | Line 155: | ||
* [[Gimemo]] | * [[Gimemo]] | ||
* [[Gh0st RAT]] | * [[Gh0st RAT]] | ||
* [[GlassRAT]] | |||
* [[Goldenbaks]] | * [[Goldenbaks]] | ||
* [[GootKit]] | |||
* [[Goscri]] | * [[Goscri]] | ||
* [[Gozi]] / [[Ursnif]], [[Prinimalka]], [[Vawtrak]] | * [[Gozi]] / [[Ursnif]], [[Prinimalka]], [[Vawtrak]] | ||
* [[Gpcode]] | * [[Gpcode]] | ||
* [[GranCrab]] / [[GandCrab]] | |||
* [[Grum]] / [[Tedroo]] | * [[Grum]] / [[Tedroo]] | ||
* [[Gumblar]] | * [[Gumblar]] | ||
| Line 156: | Line 174: | ||
* [[Hermes]] | * [[Hermes]] | ||
* [[HerpesNet]] | * [[HerpesNet]] | ||
* [[Hesperbot]] | |||
* [[Hikit]] | * [[Hikit]] | ||
* [[Hiloti]] | * [[Hiloti]] | ||
| Line 174: | Line 193: | ||
* [[Jagfu]] | * [[Jagfu]] | ||
* [[Jenxcus]] | * [[Jenxcus]] | ||
* [[Jigsaw]] | |||
=== K === | === K === | ||
| Line 180: | Line 200: | ||
* [[Karn!v0r3x]] | * [[Karn!v0r3x]] | ||
* [[Kelihos]] | * [[Kelihos]] | ||
* [[KINS]] | |||
* [[Kjw0rm]] | * [[Kjw0rm]] | ||
* [[Kneber]] | * [[Kneber]] | ||
| Line 191: | Line 212: | ||
* [[Leouncia]] | * [[Leouncia]] | ||
* [[Lethic]] | * [[Lethic]] | ||
* [[ | * [[LockerGoga]] | ||
* [[LockScreen.CI]] | |||
* [[Locky]] | |||
* [[LogPOS]] | * [[LogPOS]] | ||
* [[Lukitus]] | |||
* [[LusyPOS]] | * [[LusyPOS]] | ||
* [[Lyposit]] | * [[Lyposit]] | ||
| Line 212: | Line 236: | ||
* [[MiniDuke]] | * [[MiniDuke]] | ||
* [[Mirage]] | * [[Mirage]] | ||
* [[Mirai]] | |||
* [[Mlano]] | * [[Mlano]] | ||
* [[Mocbot]] / [[Wargbot]], [[Graweg]] | * [[Mocbot]] / [[Wargbot]], [[Graweg]] | ||
* [[ModPOS]] | |||
* [[Monkif]] / [[ExeDot]], [[DIKhora]] | * [[Monkif]] / [[ExeDot]], [[DIKhora]] | ||
* [[MP-DDoser]] | * [[MP-DDoser]] | ||
| Line 222: | Line 248: | ||
=== N === | === N === | ||
* [[NanoCore]] | * [[NanoCore]] | ||
* [[Nemucod]] | |||
* [[Netsky]] | * [[Netsky]] | ||
* [[Nertra]] | * [[Nertra]] | ||
| Line 244: | Line 271: | ||
* [[Pandora]] | * [[Pandora]] | ||
* [[Patcher]] / [[Multibanker]], [[Bankpatcher]] | * [[Patcher]] / [[Multibanker]], [[Bankpatcher]] | ||
* [[Petya]] | |||
* [[Pexby]] | * [[Pexby]] | ||
* [[Phatbot]] | * [[Phatbot]] | ||
* [[PiceBOT]] | * [[PiceBOT]] | ||
* [[PickPocket]] | * [[PickPocket]] | ||
* [[Pinkslipbot]] | |||
* [[Pirpi]] | * [[Pirpi]] | ||
* [[Pitou]] | * [[Pitou]] | ||
| Line 286: | Line 315: | ||
* [[Regin]] | * [[Regin]] | ||
* [[Reposin]] | * [[Reposin]] | ||
* [[Revenge RAT]] | |||
* [[Reveton]] | * [[Reveton]] | ||
* [[Revoyem]] | * [[Revoyem]] | ||
| Line 292: | Line 322: | ||
=== S === | === S === | ||
* [[Sage]] | |||
* [[Sality]] | |||
* [[SamSam]] | |||
* [[Sasser]] | * [[Sasser]] | ||
* [[ScarePakage]] | * [[ScarePakage]] | ||
* [[Sdbot]] | * [[Sdbot]] | ||
* [[Shifu]] | |||
* [[Shylock]] / [[Caphaw]] | * [[Shylock]] / [[Caphaw]] | ||
* [[Silence Locker]] | * [[Silence Locker]] | ||
| Line 302: | Line 336: | ||
* [[Simplocker]] | * [[Simplocker]] | ||
* [[Sinit]] | * [[Sinit]] | ||
* [[Sinowal]] / [[Mebroot]], [[Rootkit MBR]], [[Bootkit (botnet)]] | |||
* [[Sir DoOom]] | * [[Sir DoOom]] | ||
* [[Skunkx]] | * [[Skunkx]] | ||
| Line 310: | Line 345: | ||
* [[Sobig]] / [[Palyh]] | * [[Sobig]] / [[Palyh]] | ||
* [[Solar]] / [[Napolar]] | * [[Solar]] / [[Napolar]] | ||
* [[Sopelka]] | |||
* [[Soraya]] | * [[Soraya]] | ||
* [[Spachanel]] | * [[Spachanel]] | ||
| Line 316: | Line 352: | ||
* [[Spark]] | * [[Spark]] | ||
* [[SpyEye]] | * [[SpyEye]] | ||
* [[ | * [[SpyBot]] / [[SDBot]], [[Rbot]], [[UrBot]], [[UrXBot]] | ||
* [[Srizbi]] / [[Cbeplay]], [[Exchanger]] | * [[Srizbi]] / [[Cbeplay]], [[Exchanger]] | ||
* [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]] | * [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]] | ||
| Line 332: | Line 368: | ||
* [[Tatanga]] | * [[Tatanga]] | ||
* [[Tequila]] | * [[Tequila]] | ||
* [[TeslaCrypt]] | |||
* [[The Mask]] | * [[The Mask]] | ||
* [[Thor]] | * [[Thor]] | ||
| Line 338: | Line 375: | ||
* [[Tilon]] | * [[Tilon]] | ||
* [[Tinba]] / [[Gataka]] | * [[Tinba]] / [[Gataka]] | ||
* [[TinyNuke]] | |||
* [[Tobfy]] | * [[Tobfy]] | ||
* [[Tobfy.N]] | * [[Tobfy.N]] | ||
| Line 343: | Line 381: | ||
* [[TorrentLocker]] | * [[TorrentLocker]] | ||
* [[Travnet]] | * [[Travnet]] | ||
* [[TreasureHunt]] | |||
* [[Turla]] / [[Uroburos]], [[Snake]] | * [[Turla]] / [[Uroburos]], [[Snake]] | ||
* [[Twitter based botnet]] | * [[Twitter based botnet]] | ||
| Line 361: | Line 400: | ||
* [[Vicas]] | * [[Vicas]] | ||
* [[VinSelf]] | * [[VinSelf]] | ||
* [[ViperRAT]] | |||
* [[VirLock]] | * [[VirLock]] | ||
* [[Virut]] | * [[Virut]] | ||
| Line 367: | Line 407: | ||
=== W === | === W === | ||
* [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]] | * [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]] | ||
* [[Wannacry]] | |||
* [[Warezov]] | * [[Warezov]] | ||
* [[Warbot]] | * [[Warbot]] | ||
| Line 403: | Line 444: | ||
* [[Banking]] | * [[Banking]] | ||
** [[Point-of-sale]] | ** [[Point-of-sale]] | ||
* [[Click frauding]] | |||
* [[DDoSing]] | * [[DDoSing]] | ||
* [[Ransomware]] | * [[Ransomware]] | ||
| Line 421: | Line 463: | ||
* Exchange | * Exchange | ||
* Mules | * Mules | ||
* Pay-per-install | |||
* Security software check | * Security software check | ||
* Traffic | * Traffic | ||
| Line 431: | Line 474: | ||
{{Div col|3}} | {{Div col|3}} | ||
=== A === | === A === | ||
* [[Alpha Pack]] | |||
* [[Angler]] | * [[Angler]] | ||
* [[Archie]] | * [[Archie]] | ||
* [[Assoc AID]] | |||
* [[Astrum]] | * [[Astrum]] | ||
| Line 446: | Line 491: | ||
* [[Cool Exploit Kit]] | * [[Cool Exploit Kit]] | ||
* [[Cool Pack]] | * [[Cool Pack]] | ||
* [[CritXPack]] | * [[CritXPack]] / [[Vintage Pack]] | ||
=== D === | === D === | ||
| Line 461: | Line 506: | ||
=== G === | === G === | ||
* [[Glazunov]] | |||
* [[Gong Da]] / [[Gongdad]] | * [[Gong Da]] / [[Gongdad]] | ||
* [[GrandSoft]] | * [[GrandSoft]] | ||
| Line 495: | Line 541: | ||
=== P === | === P === | ||
* [[Phoenix]] | * [[Phoenix]] | ||
* [[Private EK]] | |||
* [[ProPack]] | * [[ProPack]] | ||
=== R === | === R === | ||
* [[Red Dot]] | * [[Red Dot]] | ||
* [[RedKit]] | * [[RedKit]] / [[Goon]], [[Puerto]] | ||
* [[RIG]] | * [[RIG]] | ||
| Line 504: | Line 552: | ||
* [[Sakura]] | * [[Sakura]] | ||
* [[Sava]] | * [[Sava]] | ||
* [[Serenity]] | * [[Serenity]] / [[Serenity Pack]] | ||
* [[Siberia]] / [[Siberia Private]] | * [[Siberia]] / [[Siberia Private]] | ||
* [[Sibhost]] / [[Kore]] | * [[Sibhost]] / [[Kore]], [[Urausy EK]], [[BestAV EK]] | ||
* [[SofosFO]] | * [[SofosFO]] | ||
* [[Spartan]] | |||
* [[SPL Pack]] | |||
* [[Styx]] / [[Kein]] | * [[Styx]] / [[Kein]] | ||
* [[Sundown]] | |||
* [[Sweet Orange]] | * [[Sweet Orange]] | ||
=== T === | === T === | ||
* [[T-Pack]] | * [[T-Pack]] | ||
* [[Techno XPack]] | |||
=== V === | === V === | ||
* [[Vintage Pack]] | * [[Vintage Pack]] | ||
=== X === | |||
* [[x2o]] / [[Redkit light]] | |||
=== Y === | |||
* [[Yang Pack]] | |||
=== Z === | |||
* [[Zhi Zhu]] | |||
{{Div col end}} | {{Div col end}} | ||
== Malware and botnet related Services == | == Malware and botnet related Services == | ||
=== C === | === C === | ||
* Check4Me | * [[Check4Me]] | ||
=== I === | === I === | ||
* Iframeshop | * [[Iframeshop]] | ||
=== P === | === P === | ||
* Prepaidex | * [[Prepaidex]] | ||
=== S === | === S === | ||
* Scan4you | * [[Scan4you]] | ||
* SollHost | * [[SollHost]] | ||
Latest revision as of 12:17, 14 March 2020
Introduction
This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully defended in November 2015 in Paris, France. But work continues...
Botnets
A
- AbaddonPOS
- Accdfisa
- Acebot
- Ackposts
- Admin.HLP
- Adneukine
- Adrenalin
- Agobot / Gaobot Related families: Phatbot, Forbot, Polybot, XtremBot
- Ainslot
- Akbot / Qakbot, Pinkslipbot, Qbot
- Aldi
- Alebrije
- AlertLock
- Alina
- Alphacrypt
- Alureon / Olmarik, TDSS, TDL, Popureb
- Americana Dreams
- Andromeda / Gamarue
- AnnLoader
- Apbot
- Arcom
- Asprox / Badsrc, Aseljo
- Athena
- Atrax
- Avalanche
- Avatar
- Avzahn
B
- Backscript
- Backoff
- Bagle / Beagle, Mitglieder, Lodeight
- Bahama
- Bamital
- Barracuda
- Bashlight
- Bedep
- Beebone / Symmi, Changeup, Vobfus
- Bereb / Related to Kiribot
- BernhardPOS
- BlackEnergy
- BlackPOS / Dump Memory Grabber
- BlackShades
- Bmaster
- Bobax / Bobic, Oderoor, Cotmonger, Hacktool.Spammer, Kraken
- Bomba Locker
- Boxer
- Bozok
- Bredolab
- BrutPOS
C
- Carbanak
- Carberp / Caberp, Syscron
- Carna
- Casier
- Cbeplay.P
- Cerber
- Cerberus
- Chameleon
- ChewBacca
- Chidol
- Chthonic
- Cimbot
- Citadel
- Clampi / Ligats, Ilomo or Rscan
- Coinbitclip
- CoinVault
- Comfoo
- Conficker / Downup, Downadup, Kido
- CoreBot
- Coreflood
- Coverton
- Cridex / Bugat, Feodo
- Critroni / CTB-Locker
- Cryakl / Fantomas
- CryptoDefense
- CryptoLocker
- Cryptoblocker
- CryptXXX
- Cutwail / Pandex, Mutant
- Cythosia
D
- Daredevil
- DaRK DDoSseR
- Dark-Mailer
- DarkComet
- DarkMegi
- Darkness / Optima, Votwup
- Decebal
- Destory
- Devdar
- Dexter
- Dharma
- Dirt Jumper
- Disker
- DistTrack
- Dldr.Agent.JKH
- Dlena
- Donbot / Bachsoy, Buzus
- Dorifel / Quervar, XDocCrypt
- Dorkbot / Nrgbot, Ngrbot
- Duqu
- Dyre / Dyreza, Dyzap, Dyranges
E
F
- Fakavalert
- FakeM
- Feederbot
- Festi
- Fivetoone / DMSpammer
- Flagui
- Flame / Flamer, sKyWIper
- Flashback / Flashfake
- Flimrans
- Foag
- Forbot
- FrameworkPOS
- Frutas
- Fuflo
G
- Galock
- GamaPoS
- Gameover / P2P ZeuS
- Gammima
- Gapz
- Gauss
- Gbot
- Gema
- Gendarmerie
- Generetic
- Getmypass
- Gheg / Tofsee, Mondera
- Gimemo
- Gh0st RAT
- GlassRAT
- Goldenbaks
- GootKit
- Goscri
- Gozi / Ursnif, Prinimalka, Vawtrak
- Gpcode
- GranCrab / GandCrab
- Grum / Tedroo
- Gumblar
H
- Hamweq
- HangOver
- Harasom
- Harnig / Piptea
- HelloGirl
- Heloag
- Hermes
- HerpesNet
- Hesperbot
- Hikit
- Hiloti
- Hodprot
- H-Worm
I
J
K
L
M
- Maazben
- Madi
- Makadocs
- Malex
- MalumPoS
- Mariachi
- Mariposa
- MDK
- Mebromi
- Medfos / Midhos
- Mega-D / Ozdok
- Mehika / TwitterBot, Hittler
- Metulji / EvilFistSquad
- MiniDuke
- Mirage
- Mirai
- Mlano
- Mocbot / Wargbot, Graweg
- ModPOS
- Monkif / ExeDot, DIKhora
- MP-DDoser
- Multi-Locker
- Murofet / Licat
- Mytob
N
- NanoCore
- Nemucod
- Netsky
- Nertra
- NetTraveler
- NewPOSThings
- Ngrbot
- NitlovePOS
- Nitol
- Nitro
- NjRAT / Variant: H-Worm
- Njw0rm
- Nucrypt / Loosky, Locksky
- Nugache
- Nymaim
O
P
- Pandora
- Patcher / Multibanker, Bankpatcher
- Petya
- Pexby
- Phatbot
- PiceBOT
- PickPocket
- Pinkslipbot
- Pirpi
- Pitou
- PlugX / Korplug, Gulpix
- Pobelka
- Poebot / W32/Linkbot
- Poison Ivy
- PokerAgent
- Polybot
- Ponmocup / Pirminay, Swisyn, Vundo
- Pony / Fareit
- Poof
- Poseidon
- Power Bot
- Pramro
- PrettyPark
- Prinimalka
- Psybot
- PTA
- Punkey
- Pushdo
Q
R
- Ramnit
- Ranbyus
- Ranky
- Rannoh / Matsnu
- Ransom.EY
- Ransom.HY
- Ransom.IF
- Ransom.II
- Ransom.JU
- Raxm
- Rdasrv
- Regin
- Reposin
- Revenge RAT
- Reveton
- Revoyem
- Rocra
- Rustock / RKRustok, Costrat, Meredrop
S
- Sage
- Sality
- SamSam
- Sasser
- ScarePakage
- Sdbot
- Shifu
- Shylock / Caphaw
- Silence Locker
- Silent Winlocker
- Silon
- Simda
- Simplocker
- Sinit
- Sinowal / Mebroot, Rootkit MBR, Bootkit (botnet)
- Sir DoOom
- Skunkx
- Slapper
- Smoke Bot
- SMSZombie
- Snap
- Sobig / Palyh
- Solar / Napolar
- Sopelka
- Soraya
- Spachanel
- SpamSoldier
- SpamThru / Spam-DComServ, Covesmer, Xmiler
- Spark
- SpyEye
- SpyBot / SDBot, Rbot, UrBot, UrXBot
- Srizbi / Cbeplay, Exchanger
- Storm / Nuwar, Peacomm, Zhelatin, Tibs
- Stration / Warezov, Opnis
- Studma
- Supern0va
- Swizzor
- Sykipot
- SynoLocker
T
- TDL-4 / TDL-3, TDSS, DGAv14
- Taidoor
- Tatanarg
- Tatanga
- Tequila
- TeslaCrypt
- The Mask
- Thor
- TidServ
- Tigger / Syzor
- Tilon
- Tinba / Gataka
- TinyNuke
- Tobfy
- Tobfy.N
- Torpig
- TorrentLocker
- Travnet
- TreasureHunt
- Turla / Uroburos, Snake
- Twitter based botnet
U
V
W
- Waledac / Waled, SLM, Kelihos, Hilux, Hlux, Nap
- Wannacry
- Warezov
- Warbot
- Weelsof
- Wigon
- Wiper
- Wirenet
- Wopla / Pokier, Slogger
X
Y
Z
Campaigns
Groups
- Banking
- Click frauding
- DDoSing
- Ransomware
- RAT / Remote administration trojan
- Spying
- Spamming
- Stealing
Criminal services
- Bulletproof hosting
- DDoSing / Stress test
- Encryption
- Exchange
- Mules
- Pay-per-install
- Security software check
- Traffic
- VPN
Panels
Z
Exploit kits/packs
A
B
C
D
E
F
G
H
I
K
L
M
N
P
R
S
- Sakura
- Sava
- Serenity / Serenity Pack
- Siberia / Siberia Private
- Sibhost / Kore, Urausy EK, BestAV EK
- SofosFO
- Spartan
- SPL Pack
- Styx / Kein
- Sundown
- Sweet Orange