Difference between revisions of "Main Page"
Jump to navigation
Jump to search
(→W) |
|||
(147 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
__NOTOC__ | __NOTOC__ | ||
[ | == Introduction == | ||
This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully [http://blog.crimenumerique.fr/2015/11/21/lutte-contre-les-botnets/ defended in November 2015 in Paris], France. But work continues... | |||
== Botnets == | == Botnets == | ||
{{Div col|3}} | {{Div col|3}} | ||
=== A === | === A === | ||
* [[AbaddonPOS]] | |||
* [[Accdfisa]] | * [[Accdfisa]] | ||
* [[Acebot]] | * [[Acebot]] | ||
Line 15: | Line 17: | ||
* [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]] | * [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]] | ||
* [[Ainslot]] | * [[Ainslot]] | ||
* [[Akbot]] / Qakbot, Pinkslipbot, Qbot | * [[Akbot]] / [[Qakbot]], [[Pinkslipbot]], [[Qbot]] | ||
* [[Aldi]] | * [[Aldi]] | ||
* [[Alebrije]] | * [[Alebrije]] | ||
* [[AlertLock]] | * [[AlertLock]] | ||
* [[Alina]] | |||
* [[Alphacrypt]] | |||
* [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]] | * [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]] | ||
* [[Americana Dreams]] | * [[Americana Dreams]] | ||
* [[Andromeda]] / [[Gamarue]] | * [[Andromeda]] / [[Gamarue]] | ||
* [[AnnLoader]] | * [[AnnLoader]] | ||
Line 40: | Line 43: | ||
* [[Bamital]] | * [[Bamital]] | ||
* [[Barracuda]] | * [[Barracuda]] | ||
* [[Bashlight]] | |||
* [[Bedep]] | |||
* [[Beebone]] / [[Symmi]], [[Changeup]], [[Vobfus]] | |||
* [[Bereb]] / Related to [[Kiribot]] | * [[Bereb]] / Related to [[Kiribot]] | ||
* [[BernhardPOS]] | |||
* [[BlackEnergy]] | * [[BlackEnergy]] | ||
* [[BlackPOS]] / [[Dump Memory Grabber]] | |||
* [[BlackShades]] | * [[BlackShades]] | ||
* [[Bmaster]] | |||
* [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]] | * [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]] | ||
* [[Bomba Locker]] | * [[Bomba Locker]] | ||
* [[Boxer]] | |||
* [[Bozok]] | * [[Bozok]] | ||
* [[Bredolab]] | * [[Bredolab]] | ||
* [[BrutPOS]] | |||
=== C === | === C === | ||
* [[Carbanak]] | |||
* [[Carberp]] / [[Caberp]], [[Syscron]] | * [[Carberp]] / [[Caberp]], [[Syscron]] | ||
* [[Carna]] | |||
* [[Casier]] | * [[Casier]] | ||
* [[Cbeplay.P]] | * [[Cbeplay.P]] | ||
* [[Cerber]] | |||
* [[Cerberus]] | * [[Cerberus]] | ||
* [[Chameleon]] | * [[Chameleon]] | ||
* [[ChewBacca]] | |||
* [[Chidol]] | * [[Chidol]] | ||
* [[Chthonic]] | |||
* [[Cimbot]] | * [[Cimbot]] | ||
* [[Citadel]] | * [[Citadel]] | ||
* [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]] | * [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]] | ||
* [[Coinbitclip]] | |||
* [[CoinVault]] | |||
* [[Comfoo]] | * [[Comfoo]] | ||
* [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]] | * [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]] | ||
* [[CoreBot]] | |||
* [[Coreflood]] | * [[Coreflood]] | ||
* [[Coverton]] | |||
* [[Cridex]] / [[Bugat]], [[Feodo]] | * [[Cridex]] / [[Bugat]], [[Feodo]] | ||
* [[Critroni]] / [[CTB-Locker]] | * [[Critroni]] / [[CTB-Locker]] | ||
* [[Cryakl]] / [[Fantomas]] | |||
* [[CryptoDefense]] | * [[CryptoDefense]] | ||
* [[CryptoLocker]] | * [[CryptoLocker]] | ||
* [[Cryptoblocker]] | * [[Cryptoblocker]] | ||
* [[CryptXXX]] | |||
* [[Cutwail]] / [[Pandex]], [[Mutant]] | * [[Cutwail]] / [[Pandex]], [[Mutant]] | ||
* [[Cythosia]] | * [[Cythosia]] | ||
=== D === | === D === | ||
* [[Daredevil]] | |||
* [[DaRK DDoSseR]] | * [[DaRK DDoSseR]] | ||
* [[Dark-Mailer]] | * [[Dark-Mailer]] | ||
* [[DarkComet]] | * [[DarkComet]] | ||
* [[DarkMegi]] | |||
* [[Darkness]] / [[Optima]], [[Votwup]] | * [[Darkness]] / [[Optima]], [[Votwup]] | ||
* [[Decebal]] | |||
* [[Destory]] | * [[Destory]] | ||
* [[Devdar]] | * [[Devdar]] | ||
* [[Dexter]] | |||
* [[Dharma]] | |||
* [[Dirt Jumper]] | * [[Dirt Jumper]] | ||
* [[Disker]] | * [[Disker]] | ||
Line 85: | Line 112: | ||
* [[Dorkbot]] / [[Nrgbot]], [[Ngrbot]] | * [[Dorkbot]] / [[Nrgbot]], [[Ngrbot]] | ||
* [[Duqu]] | * [[Duqu]] | ||
* [[Dyre]] / [[Dyreza]], [[Dyzap]], [[Dyranges]] | |||
=== E === | === E === | ||
* [[Eagle]] | |||
* [[Eggdrop]] | * [[Eggdrop]] | ||
* [[Encriyoko]] | * [[Encriyoko]] | ||
* [[Epubb]] | * [[Epubb]] | ||
* [[Ertfor]] | |||
* [[Esthost]] | * [[Esthost]] | ||
* [[Etumbot]] | * [[Etumbot]] | ||
Line 97: | Line 127: | ||
* [[Fakavalert]] | * [[Fakavalert]] | ||
* [[FakeM]] | * [[FakeM]] | ||
* [[ | * [[Feederbot]] | ||
* [[Festi]] | * [[Festi]] | ||
* [[Fivetoone]] / [[DMSpammer]] | * [[Fivetoone]] / [[DMSpammer]] | ||
Line 105: | Line 135: | ||
* [[Flimrans]] | * [[Flimrans]] | ||
* [[Foag]] | * [[Foag]] | ||
* [[Forbot]] | |||
* [[FrameworkPOS]] | |||
* [[Frutas]] | * [[Frutas]] | ||
* [[Fuflo]] | * [[Fuflo]] | ||
Line 110: | Line 142: | ||
=== G === | === G === | ||
* [[Galock]] | * [[Galock]] | ||
* [[GamaPoS]] | |||
* [[Gameover]] / [[P2P ZeuS]] | * [[Gameover]] / [[P2P ZeuS]] | ||
* [[Gammima]] | * [[Gammima]] | ||
Line 118: | Line 151: | ||
* [[Gendarmerie]] | * [[Gendarmerie]] | ||
* [[Generetic]] | * [[Generetic]] | ||
* [[Getmypass]] | |||
* [[Gheg]] / [[Tofsee]], [[Mondera]] | * [[Gheg]] / [[Tofsee]], [[Mondera]] | ||
* [[Gimemo]] | * [[Gimemo]] | ||
* [[Gh0st RAT]] | * [[Gh0st RAT]] | ||
* [[GlassRAT]] | |||
* [[Goldenbaks]] | * [[Goldenbaks]] | ||
* [[GootKit]] | |||
* [[Goscri]] | * [[Goscri]] | ||
* [[Gozi]] / [[Ursnif]] | * [[Gozi]] / [[Ursnif]], [[Prinimalka]], [[Vawtrak]] | ||
* [[Gpcode]] | * [[Gpcode]] | ||
* [[GranCrab]] / [[GandCrab]] | |||
* [[Grum]] / [[Tedroo]] | * [[Grum]] / [[Tedroo]] | ||
* [[Gumblar]] | * [[Gumblar]] | ||
Line 137: | Line 174: | ||
* [[Hermes]] | * [[Hermes]] | ||
* [[HerpesNet]] | * [[HerpesNet]] | ||
* [[Hesperbot]] | |||
* [[Hikit]] | * [[Hikit]] | ||
* [[Hiloti]] | * [[Hiloti]] | ||
* [[Hodprot]] | * [[Hodprot]] | ||
* [[H-Worm]] | |||
=== I === | === I === | ||
Line 151: | Line 190: | ||
=== J === | === J === | ||
* [[JackPOS]] | |||
* [[Jagfu]] | * [[Jagfu]] | ||
* [[Jenxcus]] | * [[Jenxcus]] | ||
* [[Jigsaw]] | |||
=== K === | === K === | ||
Line 159: | Line 200: | ||
* [[Karn!v0r3x]] | * [[Karn!v0r3x]] | ||
* [[Kelihos]] | * [[Kelihos]] | ||
* [[KINS]] | |||
* [[Kjw0rm]] | |||
* [[Kneber]] | * [[Kneber]] | ||
* [[Koler]] | |||
* [[Kovter]] | * [[Kovter]] | ||
* [[Koobface]] | * [[Koobface]] | ||
Line 168: | Line 212: | ||
* [[Leouncia]] | * [[Leouncia]] | ||
* [[Lethic]] | * [[Lethic]] | ||
* [[ | * [[LockerGoga]] | ||
* [[LockScreen.CI]] | |||
* [[Locky]] | |||
* [[LogPOS]] | |||
* [[Lukitus]] | |||
* [[LusyPOS]] | |||
* [[Lyposit]] | * [[Lyposit]] | ||
Line 176: | Line 225: | ||
* [[Makadocs]] | * [[Makadocs]] | ||
* [[Malex]] | * [[Malex]] | ||
* [[MalumPoS]] | |||
* [[Mariachi]] | * [[Mariachi]] | ||
* [[Mariposa]] | * [[Mariposa]] | ||
Line 186: | Line 236: | ||
* [[MiniDuke]] | * [[MiniDuke]] | ||
* [[Mirage]] | * [[Mirage]] | ||
* [[Mirai]] | |||
* [[Mlano]] | * [[Mlano]] | ||
* [[Mocbot]] / [[Wargbot]], [[Graweg]] | * [[Mocbot]] / [[Wargbot]], [[Graweg]] | ||
* [[ModPOS]] | |||
* [[Monkif]] / [[ExeDot]], [[DIKhora]] | * [[Monkif]] / [[ExeDot]], [[DIKhora]] | ||
* [[MP-DDoser]] | * [[MP-DDoser]] | ||
Line 195: | Line 247: | ||
=== N === | === N === | ||
* [[NanoCore]] | |||
* [[Nemucod]] | |||
* [[Netsky]] | * [[Netsky]] | ||
* [[Nertra]] | * [[Nertra]] | ||
* [[NetTraveler]] | * [[NetTraveler]] | ||
* [[NewPOSThings]] | |||
* [[Ngrbot]] | * [[Ngrbot]] | ||
* [[NitlovePOS]] | |||
* [[Nitol]] | * [[Nitol]] | ||
* [[Nitro]] | * [[Nitro]] | ||
* [[NjRAT]] / Variant: [[H-Worm]] | |||
* [[Njw0rm]] | |||
* [[Nucrypt]] / [[Loosky]], [[Locksky]] | * [[Nucrypt]] / [[Loosky]], [[Locksky]] | ||
* [[Nugache]] | * [[Nugache]] | ||
Line 208: | Line 266: | ||
* [[Obad]] | * [[Obad]] | ||
* [[OneWordSub]] | * [[OneWordSub]] | ||
* [[OphionLocker]] | |||
=== P === | === P === | ||
* [[Pandora]] | * [[Pandora]] | ||
* [[Patcher]] / [[Multibanker]], [[Bankpatcher]] | * [[Patcher]] / [[Multibanker]], [[Bankpatcher]] | ||
* [[Petya]] | |||
* [[Pexby]] | * [[Pexby]] | ||
* [[Phatbot]] | * [[Phatbot]] | ||
* [[PiceBOT]] | * [[PiceBOT]] | ||
* [[PickPocket]] | * [[PickPocket]] | ||
* [[Pinkslipbot]] | |||
* [[Pirpi]] | * [[Pirpi]] | ||
* [[Pitou]] | * [[Pitou]] | ||
Line 234: | Line 295: | ||
* [[Psybot]] | * [[Psybot]] | ||
* [[PTA]] | * [[PTA]] | ||
* [[Punkey]] | |||
* [[Pushdo]] | * [[Pushdo]] | ||
Line 248: | Line 310: | ||
* [[Ransom.IF]] | * [[Ransom.IF]] | ||
* [[Ransom.II]] | * [[Ransom.II]] | ||
* [[Ransom.JU]] | |||
* [[Raxm]] | * [[Raxm]] | ||
* [[Rdasrv]] | |||
* [[Regin]] | |||
* [[Reposin]] | * [[Reposin]] | ||
* [[Revenge RAT]] | |||
* [[Reveton]] | * [[Reveton]] | ||
* [[Revoyem]] | * [[Revoyem]] | ||
Line 256: | Line 322: | ||
=== S === | === S === | ||
* [[Sage]] | |||
* [[Sality]] | |||
* [[SamSam]] | |||
* [[Sasser]] | * [[Sasser]] | ||
* [[ScarePakage]] | * [[ScarePakage]] | ||
* [[Sdbot]] | * [[Sdbot]] | ||
* [[Shifu]] | |||
* [[Shylock]] / [[Caphaw]] | * [[Shylock]] / [[Caphaw]] | ||
* [[Silence Locker]] | * [[Silence Locker]] | ||
* [[Silent Winlocker]] | * [[Silent Winlocker]] | ||
* [[Silon]] | * [[Silon]] | ||
* [[Simda]] | |||
* [[Simplocker]] | * [[Simplocker]] | ||
* [[Sinit]] | * [[Sinit]] | ||
* [[Sinowal]] / [[Mebroot]], [[Rootkit MBR]], [[Bootkit (botnet)]] | |||
* [[Sir DoOom]] | |||
* [[Skunkx]] | * [[Skunkx]] | ||
* [[Slapper]] | * [[Slapper]] | ||
Line 272: | Line 345: | ||
* [[Sobig]] / [[Palyh]] | * [[Sobig]] / [[Palyh]] | ||
* [[Solar]] / [[Napolar]] | * [[Solar]] / [[Napolar]] | ||
* [[Sopelka]] | |||
* [[Soraya]] | |||
* [[Spachanel]] | * [[Spachanel]] | ||
* [[SpamSoldier]] | * [[SpamSoldier]] | ||
* [[SpamThru]] / [[Spam-DComServ]], [[Covesmer]], [[Xmiler]] | * [[SpamThru]] / [[Spam-DComServ]], [[Covesmer]], [[Xmiler]] | ||
* [[Spark]] | |||
* [[SpyEye]] | * [[SpyEye]] | ||
* [[ | * [[SpyBot]] / [[SDBot]], [[Rbot]], [[UrBot]], [[UrXBot]] | ||
* [[Srizbi]] / [[Cbeplay]], [[Exchanger]] | * [[Srizbi]] / [[Cbeplay]], [[Exchanger]] | ||
* [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]] | * [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]] | ||
Line 292: | Line 368: | ||
* [[Tatanga]] | * [[Tatanga]] | ||
* [[Tequila]] | * [[Tequila]] | ||
* [[TeslaCrypt]] | |||
* [[The Mask]] | * [[The Mask]] | ||
* [[Thor]] | * [[Thor]] | ||
Line 298: | Line 375: | ||
* [[Tilon]] | * [[Tilon]] | ||
* [[Tinba]] / [[Gataka]] | * [[Tinba]] / [[Gataka]] | ||
* [[TinyNuke]] | |||
* [[Tobfy]] | * [[Tobfy]] | ||
* [[Tobfy.N]] | * [[Tobfy.N]] | ||
* [[Torpig]] | * [[Torpig]] | ||
* [[TorrentLocker]] | |||
* [[Travnet]] | * [[Travnet]] | ||
* [[TreasureHunt]] | |||
* [[Turla]] / [[Uroburos]], [[Snake]] | |||
* [[Twitter based botnet]] | * [[Twitter based botnet]] | ||
Line 316: | Line 397: | ||
=== V === | === V === | ||
* [[VertexNet]] | * [[VertexNet]] | ||
* [[Vicas]] | * [[Vicas]] | ||
* [[VinSelf]] | * [[VinSelf]] | ||
* [[ViperRAT]] | |||
* [[VirLock]] | |||
* [[Virut]] | * [[Virut]] | ||
* [[VOlk]] | * [[VOlk]] | ||
Line 325: | Line 407: | ||
=== W === | === W === | ||
* [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]] | * [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]] | ||
* [[Wannacry]] | |||
* [[Warezov]] | * [[Warezov]] | ||
* [[Warbot]] | * [[Warbot]] | ||
Line 334: | Line 417: | ||
=== X === | === X === | ||
* Xarvester / Rlsloup, Rucrzy | * [[Xarvester]] / [[Rlsloup]], [[Rucrzy]] | ||
* [[Xpaj]] | |||
* [[Xtreme RAT]] | |||
=== Y === | === Y === | ||
* YoYo | * [[YoYo]] | ||
* Ysreef | * [[Ysreef]] | ||
=== Z === | === Z === | ||
* Zapchast | * [[Zapchast]] | ||
* Zegost | * [[Zegost]] | ||
* Zemra | * [[Zemra]] | ||
* ZeroAccess | * [[ZeroAccess]] | ||
* ZeroLocker | * [[ZeroLocker]] | ||
* ZeuS / Zunker | * [[ZeuS]] / [[Zunker]] | ||
* ZeuS - P2P+DGA | * [[ZeuS - P2P+DGA]] | ||
{{Div col end}} | |||
==Campaigns== | |||
{{Div col|3}} | |||
=== D === | |||
* [[Dragonfly]] / [[Energetic Bear]] | |||
{{Div col end}} | {{Div col end}} | ||
==Groups== | ==Groups== | ||
* [[Banking]] | * [[Banking]] | ||
* [[ | ** [[Point-of-sale]] | ||
* [[Click frauding]] | |||
* [[DDoSing]] | * [[DDoSing]] | ||
* [[Fake antivirus]] | * [[Ransomware]] | ||
* [[Police lock]] | ** [[Cryptolocker]] | ||
* [[Ransomware (other)]] | ** [[Fake antivirus]] | ||
** [[Police lock]] | |||
** [[Ransomware (other)]] | |||
* [[RAT]] / [[Remote administration trojan]] | * [[RAT]] / [[Remote administration trojan]] | ||
* [[Spying]] | * [[Spying]] | ||
** [[Destructive]] | |||
* [[Spamming]] | * [[Spamming]] | ||
* [[Stealing]] | * [[Stealing]] | ||
Line 365: | Line 463: | ||
* Exchange | * Exchange | ||
* Mules | * Mules | ||
* Pay-per-install | |||
* Security software check | * Security software check | ||
* Traffic | * Traffic | ||
* VPN | * VPN | ||
== Panels == | |||
=== Z === | |||
* [[Zemra (panel)]] | |||
== Exploit kits/packs == | |||
{{Div col|3}} | |||
=== A === | |||
* [[Alpha Pack]] | |||
* [[Angler]] | |||
* [[Archie]] | |||
* [[Assoc AID]] | |||
* [[Astrum]] | |||
=== B === | |||
* [[Best]] | |||
* [[Black Dragon]] | |||
* [[Blackhole]] | |||
* [[Bleeding Life]] | |||
=== C === | |||
* [[ChePack]] | |||
* [[CkVip]] | |||
* [[Cool Exploit Kit]] | |||
* [[Cool Pack]] | |||
* [[CritXPack]] / [[Vintage Pack]] | |||
=== D === | |||
* [[Dotkachef]] | |||
=== E === | |||
* [[EgyPack]] | |||
* [[Eleonore]] | |||
=== F === | |||
* [[Fiesta]] | |||
* [[Flash (Exploit kit)]] | |||
* [[Flimkit]] | |||
* [[Fragus]] | |||
=== G === | |||
* [[Glazunov]] | |||
* [[Gong Da]] / [[Gongdad]] | |||
* [[GrandSoft]] | |||
=== H === | |||
* [[Hanjuan]] | |||
* [[Hierarchy]] | |||
=== I === | |||
* [[Impact]] | |||
* [[Incognito]] | |||
* [[Infinity (Exploit kit)]] | |||
=== K === | |||
* [[KaiXin]] / [[Gondad]] | |||
* [[Kore]] | |||
=== L === | |||
* [[LightsOut]] | |||
=== M === | |||
* [[Magnitude]] | |||
* [[MPack]] | |||
* [[Mushroom]] | |||
=== N === | |||
* [[NeoSploit]] | |||
* [[Neutrino]] | |||
* [[Nice]] | |||
* [[Niteris]] | |||
* [[Nuclear Pack]] | |||
* [[Null Hole]] | |||
=== P === | |||
* [[Phoenix]] | |||
* [[Private EK]] | |||
* [[ProPack]] | |||
=== R === | |||
* [[Red Dot]] | |||
* [[RedKit]] / [[Goon]], [[Puerto]] | |||
* [[RIG]] | |||
=== S === | |||
* [[Sakura]] | |||
* [[Sava]] | |||
* [[Serenity]] / [[Serenity Pack]] | |||
* [[Siberia]] / [[Siberia Private]] | |||
* [[Sibhost]] / [[Kore]], [[Urausy EK]], [[BestAV EK]] | |||
* [[SofosFO]] | |||
* [[Spartan]] | |||
* [[SPL Pack]] | |||
* [[Styx]] / [[Kein]] | |||
* [[Sundown]] | |||
* [[Sweet Orange]] | |||
=== T === | |||
* [[T-Pack]] | |||
* [[Techno XPack]] | |||
=== V === | |||
* [[Vintage Pack]] | |||
=== X === | |||
* [[x2o]] / [[Redkit light]] | |||
=== Y === | |||
* [[Yang Pack]] | |||
=== Z === | |||
* [[Zhi Zhu]] | |||
{{Div col end}} | |||
== Malware and botnet related Services == | |||
=== C === | |||
* [[Check4Me]] | |||
=== I === | |||
* [[Iframeshop]] | |||
=== P === | |||
* [[Prepaidex]] | |||
=== S === | |||
* [[Scan4you]] | |||
* [[SollHost]] |
Latest revision as of 12:17, 14 March 2020
Introduction
This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully defended in November 2015 in Paris, France. But work continues...
Botnets
A
- AbaddonPOS
- Accdfisa
- Acebot
- Ackposts
- Admin.HLP
- Adneukine
- Adrenalin
- Agobot / Gaobot Related families: Phatbot, Forbot, Polybot, XtremBot
- Ainslot
- Akbot / Qakbot, Pinkslipbot, Qbot
- Aldi
- Alebrije
- AlertLock
- Alina
- Alphacrypt
- Alureon / Olmarik, TDSS, TDL, Popureb
- Americana Dreams
- Andromeda / Gamarue
- AnnLoader
- Apbot
- Arcom
- Asprox / Badsrc, Aseljo
- Athena
- Atrax
- Avalanche
- Avatar
- Avzahn
B
- Backscript
- Backoff
- Bagle / Beagle, Mitglieder, Lodeight
- Bahama
- Bamital
- Barracuda
- Bashlight
- Bedep
- Beebone / Symmi, Changeup, Vobfus
- Bereb / Related to Kiribot
- BernhardPOS
- BlackEnergy
- BlackPOS / Dump Memory Grabber
- BlackShades
- Bmaster
- Bobax / Bobic, Oderoor, Cotmonger, Hacktool.Spammer, Kraken
- Bomba Locker
- Boxer
- Bozok
- Bredolab
- BrutPOS
C
- Carbanak
- Carberp / Caberp, Syscron
- Carna
- Casier
- Cbeplay.P
- Cerber
- Cerberus
- Chameleon
- ChewBacca
- Chidol
- Chthonic
- Cimbot
- Citadel
- Clampi / Ligats, Ilomo or Rscan
- Coinbitclip
- CoinVault
- Comfoo
- Conficker / Downup, Downadup, Kido
- CoreBot
- Coreflood
- Coverton
- Cridex / Bugat, Feodo
- Critroni / CTB-Locker
- Cryakl / Fantomas
- CryptoDefense
- CryptoLocker
- Cryptoblocker
- CryptXXX
- Cutwail / Pandex, Mutant
- Cythosia
D
- Daredevil
- DaRK DDoSseR
- Dark-Mailer
- DarkComet
- DarkMegi
- Darkness / Optima, Votwup
- Decebal
- Destory
- Devdar
- Dexter
- Dharma
- Dirt Jumper
- Disker
- DistTrack
- Dldr.Agent.JKH
- Dlena
- Donbot / Bachsoy, Buzus
- Dorifel / Quervar, XDocCrypt
- Dorkbot / Nrgbot, Ngrbot
- Duqu
- Dyre / Dyreza, Dyzap, Dyranges
E
F
- Fakavalert
- FakeM
- Feederbot
- Festi
- Fivetoone / DMSpammer
- Flagui
- Flame / Flamer, sKyWIper
- Flashback / Flashfake
- Flimrans
- Foag
- Forbot
- FrameworkPOS
- Frutas
- Fuflo
G
- Galock
- GamaPoS
- Gameover / P2P ZeuS
- Gammima
- Gapz
- Gauss
- Gbot
- Gema
- Gendarmerie
- Generetic
- Getmypass
- Gheg / Tofsee, Mondera
- Gimemo
- Gh0st RAT
- GlassRAT
- Goldenbaks
- GootKit
- Goscri
- Gozi / Ursnif, Prinimalka, Vawtrak
- Gpcode
- GranCrab / GandCrab
- Grum / Tedroo
- Gumblar
H
- Hamweq
- HangOver
- Harasom
- Harnig / Piptea
- HelloGirl
- Heloag
- Hermes
- HerpesNet
- Hesperbot
- Hikit
- Hiloti
- Hodprot
- H-Worm
I
J
K
L
M
- Maazben
- Madi
- Makadocs
- Malex
- MalumPoS
- Mariachi
- Mariposa
- MDK
- Mebromi
- Medfos / Midhos
- Mega-D / Ozdok
- Mehika / TwitterBot, Hittler
- Metulji / EvilFistSquad
- MiniDuke
- Mirage
- Mirai
- Mlano
- Mocbot / Wargbot, Graweg
- ModPOS
- Monkif / ExeDot, DIKhora
- MP-DDoser
- Multi-Locker
- Murofet / Licat
- Mytob
N
- NanoCore
- Nemucod
- Netsky
- Nertra
- NetTraveler
- NewPOSThings
- Ngrbot
- NitlovePOS
- Nitol
- Nitro
- NjRAT / Variant: H-Worm
- Njw0rm
- Nucrypt / Loosky, Locksky
- Nugache
- Nymaim
O
P
- Pandora
- Patcher / Multibanker, Bankpatcher
- Petya
- Pexby
- Phatbot
- PiceBOT
- PickPocket
- Pinkslipbot
- Pirpi
- Pitou
- PlugX / Korplug, Gulpix
- Pobelka
- Poebot / W32/Linkbot
- Poison Ivy
- PokerAgent
- Polybot
- Ponmocup / Pirminay, Swisyn, Vundo
- Pony / Fareit
- Poof
- Poseidon
- Power Bot
- Pramro
- PrettyPark
- Prinimalka
- Psybot
- PTA
- Punkey
- Pushdo
Q
R
- Ramnit
- Ranbyus
- Ranky
- Rannoh / Matsnu
- Ransom.EY
- Ransom.HY
- Ransom.IF
- Ransom.II
- Ransom.JU
- Raxm
- Rdasrv
- Regin
- Reposin
- Revenge RAT
- Reveton
- Revoyem
- Rocra
- Rustock / RKRustok, Costrat, Meredrop
S
- Sage
- Sality
- SamSam
- Sasser
- ScarePakage
- Sdbot
- Shifu
- Shylock / Caphaw
- Silence Locker
- Silent Winlocker
- Silon
- Simda
- Simplocker
- Sinit
- Sinowal / Mebroot, Rootkit MBR, Bootkit (botnet)
- Sir DoOom
- Skunkx
- Slapper
- Smoke Bot
- SMSZombie
- Snap
- Sobig / Palyh
- Solar / Napolar
- Sopelka
- Soraya
- Spachanel
- SpamSoldier
- SpamThru / Spam-DComServ, Covesmer, Xmiler
- Spark
- SpyEye
- SpyBot / SDBot, Rbot, UrBot, UrXBot
- Srizbi / Cbeplay, Exchanger
- Storm / Nuwar, Peacomm, Zhelatin, Tibs
- Stration / Warezov, Opnis
- Studma
- Supern0va
- Swizzor
- Sykipot
- SynoLocker
T
- TDL-4 / TDL-3, TDSS, DGAv14
- Taidoor
- Tatanarg
- Tatanga
- Tequila
- TeslaCrypt
- The Mask
- Thor
- TidServ
- Tigger / Syzor
- Tilon
- Tinba / Gataka
- TinyNuke
- Tobfy
- Tobfy.N
- Torpig
- TorrentLocker
- Travnet
- TreasureHunt
- Turla / Uroburos, Snake
- Twitter based botnet
U
V
W
- Waledac / Waled, SLM, Kelihos, Hilux, Hlux, Nap
- Wannacry
- Warezov
- Warbot
- Weelsof
- Wigon
- Wiper
- Wirenet
- Wopla / Pokier, Slogger
X
Y
Z
Campaigns
Groups
- Banking
- Click frauding
- DDoSing
- Ransomware
- RAT / Remote administration trojan
- Spying
- Spamming
- Stealing
Criminal services
- Bulletproof hosting
- DDoSing / Stress test
- Encryption
- Exchange
- Mules
- Pay-per-install
- Security software check
- Traffic
- VPN
Panels
Z
Exploit kits/packs
A
B
C
D
E
F
G
H
I
K
L
M
N
P
R
S
- Sakura
- Sava
- Serenity / Serenity Pack
- Siberia / Siberia Private
- Sibhost / Kore, Urausy EK, BestAV EK
- SofosFO
- Spartan
- SPL Pack
- Styx / Kein
- Sundown
- Sweet Orange