Difference between revisions of "Main Page"
Jump to navigation
Jump to search
(→N) |
(→D) |
||
| (136 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
__NOTOC__ | __NOTOC__ | ||
Thank you for your patience, the botnets.fr Wiki is being rebuilt. | Thank you for your patience, the botnets.fr Wiki is being rebuilt (the previous wiki is still available at https://www.botnets.fr/wiki.old) | ||
[[File:under_construction.jpg|thumb|150px]] | |||
== Introduction == | |||
This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully [http://blog.crimenumerique.fr/2015/11/21/lutte-contre-les-botnets/ defended in November 2015 in Paris], France. But work continues... | |||
== Botnets == | == Botnets == | ||
{{Div col|3}} | {{Div col|3}} | ||
=== A === | === A === | ||
* [[AbaddonPOS]] | |||
* [[Accdfisa]] | * [[Accdfisa]] | ||
* [[Acebot]] | * [[Acebot]] | ||
| Line 15: | Line 19: | ||
* [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]] | * [[Agobot]] / [[Gaobot]] Related families: [[Phatbot]], [[Forbot]], [[Polybot]], [[XtremBot]] | ||
* [[Ainslot]] | * [[Ainslot]] | ||
* [[Akbot]] / Qakbot, Pinkslipbot, Qbot | * [[Akbot]] / [[Qakbot]], [[Pinkslipbot]], [[Qbot]] | ||
* [[Aldi]] | * [[Aldi]] | ||
* [[Alebrije]] | * [[Alebrije]] | ||
* [[AlertLock]] | * [[AlertLock]] | ||
* [[Alina]] | |||
* [[Alphacrypt]] | |||
* [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]] | * [[Alureon]] / [[Olmarik]], [[TDSS]], [[TDL]], [[Popureb]] | ||
* [[Americana Dreams]] | * [[Americana Dreams]] | ||
* [[Andromeda]] / [[Gamarue]] | * [[Andromeda]] / [[Gamarue]] | ||
* [[AnnLoader]] | * [[AnnLoader]] | ||
| Line 40: | Line 45: | ||
* [[Bamital]] | * [[Bamital]] | ||
* [[Barracuda]] | * [[Barracuda]] | ||
* [[Bashlight]] | |||
* [[Bedep]] | |||
* [[Beebone]] / [[Symmi]], [[Changeup]], [[Vobfus]] | |||
* [[Bereb]] / Related to [[Kiribot]] | * [[Bereb]] / Related to [[Kiribot]] | ||
* [[BernhardPOS]] | |||
* [[BlackEnergy]] | * [[BlackEnergy]] | ||
* [[BlackPOS]] / [[Dump Memory Grabber]] | |||
* [[BlackShades]] | * [[BlackShades]] | ||
* [[Bmaster]] | |||
* [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]] | * [[Bobax]] / [[Bobic]], [[Oderoor]], [[Cotmonger]], [[Hacktool.Spammer]], [[Kraken]] | ||
* [[Bomba Locker]] | * [[Bomba Locker]] | ||
* [[Boxer]] | |||
* [[Bozok]] | * [[Bozok]] | ||
* [[Bredolab]] | * [[Bredolab]] | ||
* [[BrutPOS]] | |||
=== C === | === C === | ||
* [[Carbanak]] | |||
* [[Carberp]] / [[Caberp]], [[Syscron]] | * [[Carberp]] / [[Caberp]], [[Syscron]] | ||
* [[Carna]] | |||
* [[Casier]] | * [[Casier]] | ||
* [[Cbeplay.P]] | * [[Cbeplay.P]] | ||
* [[Cerber]] | |||
* [[Cerberus]] | * [[Cerberus]] | ||
* [[Chameleon]] | * [[Chameleon]] | ||
* [[ChewBacca]] | |||
* [[Chidol]] | * [[Chidol]] | ||
* [[Chthonic]] | |||
* [[Cimbot]] | * [[Cimbot]] | ||
* [[Citadel]] | * [[Citadel]] | ||
* [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]] | * [[Clampi]] / [[Ligats]], [[Ilomo]] or [[Rscan]] | ||
* [[Coinbitclip]] | |||
* [[CoinVault]] | |||
* [[Comfoo]] | * [[Comfoo]] | ||
* [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]] | * [[Conficker]] / [[Downup]], [[Downadup]], [[Kido]] | ||
* [[CoreBot]] | |||
* [[Coreflood]] | * [[Coreflood]] | ||
* [[Coverton]] | |||
* [[Cridex]] / [[Bugat]], [[Feodo]] | * [[Cridex]] / [[Bugat]], [[Feodo]] | ||
* [[Critroni]] / [[CTB-Locker]] | * [[Critroni]] / [[CTB-Locker]] | ||
* [[Cryakl]] / [[Fantomas]] | |||
* [[CryptoDefense]] | * [[CryptoDefense]] | ||
* [[CryptoLocker]] | * [[CryptoLocker]] | ||
* [[Cryptoblocker]] | * [[Cryptoblocker]] | ||
* [[CryptXXX]] | |||
* [[Cutwail]] / [[Pandex]], [[Mutant]] | * [[Cutwail]] / [[Pandex]], [[Mutant]] | ||
* [[Cythosia]] | * [[Cythosia]] | ||
=== D === | === D === | ||
* [[Daredevil]] | |||
* [[DaRK DDoSseR]] | * [[DaRK DDoSseR]] | ||
* [[Dark-Mailer]] | * [[Dark-Mailer]] | ||
* [[DarkComet]] | * [[DarkComet]] | ||
* [[DarkMegi]] | |||
* [[Darkness]] / [[Optima]], [[Votwup]] | * [[Darkness]] / [[Optima]], [[Votwup]] | ||
* [[Decebal]] | |||
* [[Destory]] | * [[Destory]] | ||
* [[Devdar]] | * [[Devdar]] | ||
* [[Dexter]] | |||
* [[Dharma]] | |||
* [[Dirt Jumper]] | * [[Dirt Jumper]] | ||
* [[Disker]] | * [[Disker]] | ||
| Line 85: | Line 114: | ||
* [[Dorkbot]] / [[Nrgbot]], [[Ngrbot]] | * [[Dorkbot]] / [[Nrgbot]], [[Ngrbot]] | ||
* [[Duqu]] | * [[Duqu]] | ||
* [[Dyre]] / [[Dyreza]], [[Dyzap]], [[Dyranges]] | |||
=== E === | === E === | ||
* [[Eagle]] | |||
* [[Eggdrop]] | * [[Eggdrop]] | ||
* [[Encriyoko]] | * [[Encriyoko]] | ||
* [[Epubb]] | * [[Epubb]] | ||
* [[Ertfor]] | |||
* [[Esthost]] | * [[Esthost]] | ||
* [[Etumbot]] | * [[Etumbot]] | ||
| Line 97: | Line 129: | ||
* [[Fakavalert]] | * [[Fakavalert]] | ||
* [[FakeM]] | * [[FakeM]] | ||
* [[ | * [[Feederbot]] | ||
* [[Festi]] | * [[Festi]] | ||
* [[Fivetoone]] / [[DMSpammer]] | * [[Fivetoone]] / [[DMSpammer]] | ||
| Line 105: | Line 137: | ||
* [[Flimrans]] | * [[Flimrans]] | ||
* [[Foag]] | * [[Foag]] | ||
* [[Forbot]] | |||
* [[FrameworkPOS]] | |||
* [[Frutas]] | * [[Frutas]] | ||
* [[Fuflo]] | * [[Fuflo]] | ||
| Line 110: | Line 144: | ||
=== G === | === G === | ||
* [[Galock]] | * [[Galock]] | ||
* [[GamaPoS]] | |||
* [[Gameover]] / [[P2P ZeuS]] | * [[Gameover]] / [[P2P ZeuS]] | ||
* [[Gammima]] | * [[Gammima]] | ||
| Line 118: | Line 153: | ||
* [[Gendarmerie]] | * [[Gendarmerie]] | ||
* [[Generetic]] | * [[Generetic]] | ||
* [[Getmypass]] | |||
* [[Gheg]] / [[Tofsee]], [[Mondera]] | * [[Gheg]] / [[Tofsee]], [[Mondera]] | ||
* [[Gimemo]] | * [[Gimemo]] | ||
* [[Gh0st RAT]] | * [[Gh0st RAT]] | ||
* [[GlassRAT]] | |||
* [[Goldenbaks]] | * [[Goldenbaks]] | ||
* [[GootKit]] | |||
* [[Goscri]] | * [[Goscri]] | ||
* [[Gozi]] / [[Ursnif]], [[Prinimalka]], [[Vawtrak]] | * [[Gozi]] / [[Ursnif]], [[Prinimalka]], [[Vawtrak]] | ||
* [[Gpcode]] | * [[Gpcode]] | ||
* [[GranCrab]] / [[GandCrab]] | |||
* [[Grum]] / [[Tedroo]] | * [[Grum]] / [[Tedroo]] | ||
* [[Gumblar]] | * [[Gumblar]] | ||
| Line 137: | Line 176: | ||
* [[Hermes]] | * [[Hermes]] | ||
* [[HerpesNet]] | * [[HerpesNet]] | ||
* [[Hesperbot]] | |||
* [[Hikit]] | * [[Hikit]] | ||
* [[Hiloti]] | * [[Hiloti]] | ||
* [[Hodprot]] | * [[Hodprot]] | ||
* [[H-Worm]] | |||
=== I === | === I === | ||
| Line 151: | Line 192: | ||
=== J === | === J === | ||
* [[JackPOS]] | |||
* [[Jagfu]] | * [[Jagfu]] | ||
* [[Jenxcus]] | * [[Jenxcus]] | ||
* [[Jigsaw]] | |||
=== K === | === K === | ||
| Line 159: | Line 202: | ||
* [[Karn!v0r3x]] | * [[Karn!v0r3x]] | ||
* [[Kelihos]] | * [[Kelihos]] | ||
* [[KINS]] | |||
* [[Kjw0rm]] | |||
* [[Kneber]] | * [[Kneber]] | ||
* [[Koler]] | |||
* [[Kovter]] | * [[Kovter]] | ||
* [[Koobface]] | * [[Koobface]] | ||
| Line 168: | Line 214: | ||
* [[Leouncia]] | * [[Leouncia]] | ||
* [[Lethic]] | * [[Lethic]] | ||
* [[ | * [[LockerGoga]] | ||
* [[LockScreen.CI]] | |||
* [[Locky]] | |||
* [[LogPOS]] | |||
* [[Lukitus]] | |||
* [[LusyPOS]] | |||
* [[Lyposit]] | * [[Lyposit]] | ||
| Line 176: | Line 227: | ||
* [[Makadocs]] | * [[Makadocs]] | ||
* [[Malex]] | * [[Malex]] | ||
* [[MalumPoS]] | |||
* [[Mariachi]] | * [[Mariachi]] | ||
* [[Mariposa]] | * [[Mariposa]] | ||
| Line 186: | Line 238: | ||
* [[MiniDuke]] | * [[MiniDuke]] | ||
* [[Mirage]] | * [[Mirage]] | ||
* [[Mirai]] | |||
* [[Mlano]] | * [[Mlano]] | ||
* [[Mocbot]] / [[Wargbot]], [[Graweg]] | * [[Mocbot]] / [[Wargbot]], [[Graweg]] | ||
* [[ModPOS]] | |||
* [[Monkif]] / [[ExeDot]], [[DIKhora]] | * [[Monkif]] / [[ExeDot]], [[DIKhora]] | ||
* [[MP-DDoser]] | * [[MP-DDoser]] | ||
| Line 196: | Line 250: | ||
=== N === | === N === | ||
* [[NanoCore]] | * [[NanoCore]] | ||
* [[Nemucod]] | |||
* [[Netsky]] | * [[Netsky]] | ||
* [[Nertra]] | * [[Nertra]] | ||
* [[NetTraveler]] | * [[NetTraveler]] | ||
* [[NewPOSThings]] | |||
* [[Ngrbot]] | * [[Ngrbot]] | ||
* [[NitlovePOS]] | |||
* [[Nitol]] | * [[Nitol]] | ||
* [[Nitro]] | * [[Nitro]] | ||
* [[NjRAT]] / Variant: [[H-Worm]] | |||
* [[Njw0rm]] | |||
* [[Nucrypt]] / [[Loosky]], [[Locksky]] | * [[Nucrypt]] / [[Loosky]], [[Locksky]] | ||
* [[Nugache]] | * [[Nugache]] | ||
| Line 209: | Line 268: | ||
* [[Obad]] | * [[Obad]] | ||
* [[OneWordSub]] | * [[OneWordSub]] | ||
* [[OphionLocker]] | |||
=== P === | === P === | ||
* [[Pandora]] | * [[Pandora]] | ||
* [[Patcher]] / [[Multibanker]], [[Bankpatcher]] | * [[Patcher]] / [[Multibanker]], [[Bankpatcher]] | ||
* [[Petya]] | |||
* [[Pexby]] | * [[Pexby]] | ||
* [[Phatbot]] | * [[Phatbot]] | ||
* [[PiceBOT]] | * [[PiceBOT]] | ||
* [[PickPocket]] | * [[PickPocket]] | ||
* [[Pinkslipbot]] | |||
* [[Pirpi]] | * [[Pirpi]] | ||
* [[Pitou]] | * [[Pitou]] | ||
| Line 235: | Line 297: | ||
* [[Psybot]] | * [[Psybot]] | ||
* [[PTA]] | * [[PTA]] | ||
* [[Punkey]] | |||
* [[Pushdo]] | * [[Pushdo]] | ||
| Line 251: | Line 314: | ||
* [[Ransom.JU]] | * [[Ransom.JU]] | ||
* [[Raxm]] | * [[Raxm]] | ||
* [[Rdasrv]] | |||
* [[Regin]] | |||
* [[Reposin]] | * [[Reposin]] | ||
* [[Revenge RAT]] | |||
* [[Reveton]] | * [[Reveton]] | ||
* [[Revoyem]] | * [[Revoyem]] | ||
| Line 258: | Line 324: | ||
=== S === | === S === | ||
* [[Sage]] | |||
* [[Sality]] | |||
* [[SamSam]] | |||
* [[Sasser]] | * [[Sasser]] | ||
* [[ScarePakage]] | * [[ScarePakage]] | ||
* [[Sdbot]] | * [[Sdbot]] | ||
* [[Shifu]] | |||
* [[Shylock]] / [[Caphaw]] | * [[Shylock]] / [[Caphaw]] | ||
* [[Silence Locker]] | * [[Silence Locker]] | ||
* [[Silent Winlocker]] | * [[Silent Winlocker]] | ||
* [[Silon]] | * [[Silon]] | ||
* [[Simda]] | |||
* [[Simplocker]] | * [[Simplocker]] | ||
* [[Sinit]] | * [[Sinit]] | ||
* [[Sinowal]] / [[Mebroot]], [[Rootkit MBR]], [[Bootkit (botnet)]] | |||
* [[Sir DoOom]] | |||
* [[Skunkx]] | * [[Skunkx]] | ||
* [[Slapper]] | * [[Slapper]] | ||
| Line 274: | Line 347: | ||
* [[Sobig]] / [[Palyh]] | * [[Sobig]] / [[Palyh]] | ||
* [[Solar]] / [[Napolar]] | * [[Solar]] / [[Napolar]] | ||
* [[Sopelka]] | |||
* [[Soraya]] | |||
* [[Spachanel]] | * [[Spachanel]] | ||
* [[SpamSoldier]] | * [[SpamSoldier]] | ||
* [[SpamThru]] / [[Spam-DComServ]], [[Covesmer]], [[Xmiler]] | * [[SpamThru]] / [[Spam-DComServ]], [[Covesmer]], [[Xmiler]] | ||
* [[Spark]] | |||
* [[SpyEye]] | * [[SpyEye]] | ||
* [[ | * [[SpyBot]] / [[SDBot]], [[Rbot]], [[UrBot]], [[UrXBot]] | ||
* [[Srizbi]] / [[Cbeplay]], [[Exchanger]] | * [[Srizbi]] / [[Cbeplay]], [[Exchanger]] | ||
* [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]] | * [[Storm]] / [[Nuwar]], [[Peacomm]], [[Zhelatin]], [[Tibs]] | ||
| Line 294: | Line 370: | ||
* [[Tatanga]] | * [[Tatanga]] | ||
* [[Tequila]] | * [[Tequila]] | ||
* [[TeslaCrypt]] | |||
* [[The Mask]] | * [[The Mask]] | ||
* [[Thor]] | * [[Thor]] | ||
| Line 300: | Line 377: | ||
* [[Tilon]] | * [[Tilon]] | ||
* [[Tinba]] / [[Gataka]] | * [[Tinba]] / [[Gataka]] | ||
* [[TinyNuke]] | |||
* [[Tobfy]] | * [[Tobfy]] | ||
* [[Tobfy.N]] | * [[Tobfy.N]] | ||
* [[Torpig]] | * [[Torpig]] | ||
* [[TorrentLocker]] | |||
* [[Travnet]] | * [[Travnet]] | ||
* [[TreasureHunt]] | |||
* [[Turla]] / [[Uroburos]], [[Snake]] | |||
* [[Twitter based botnet]] | * [[Twitter based botnet]] | ||
| Line 321: | Line 402: | ||
* [[Vicas]] | * [[Vicas]] | ||
* [[VinSelf]] | * [[VinSelf]] | ||
* [[ViperRAT]] | |||
* [[VirLock]] | |||
* [[Virut]] | * [[Virut]] | ||
* [[VOlk]] | * [[VOlk]] | ||
| Line 326: | Line 409: | ||
=== W === | === W === | ||
* [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]] | * [[Waledac]] / [[Waled]], [[SLM]], [[Kelihos]], [[Hilux]], [[Hlux]], [[Nap]] | ||
* [[Wannacry]] | |||
* [[Warezov]] | * [[Warezov]] | ||
* [[Warbot]] | * [[Warbot]] | ||
| Line 351: | Line 435: | ||
* [[ZeuS]] / [[Zunker]] | * [[ZeuS]] / [[Zunker]] | ||
* [[ZeuS - P2P+DGA]] | * [[ZeuS - P2P+DGA]] | ||
{{Div col end}} | |||
==Campaigns== | |||
{{Div col|3}} | |||
=== D === | |||
* [[Dragonfly]] / [[Energetic Bear]] | |||
{{Div col end}} | {{Div col end}} | ||
==Groups== | ==Groups== | ||
* [[Banking]] | * [[Banking]] | ||
** [[Point-of-sale]] | |||
* [[Click frauding]] | |||
* [[DDoSing]] | * [[DDoSing]] | ||
* [[Ransomware]] | * [[Ransomware]] | ||
| Line 363: | Line 455: | ||
* [[RAT]] / [[Remote administration trojan]] | * [[RAT]] / [[Remote administration trojan]] | ||
* [[Spying]] | * [[Spying]] | ||
** [[Destructive]] | |||
* [[Spamming]] | * [[Spamming]] | ||
* [[Stealing]] | * [[Stealing]] | ||
| Line 372: | Line 465: | ||
* Exchange | * Exchange | ||
* Mules | * Mules | ||
* Pay-per-install | |||
* Security software check | * Security software check | ||
* Traffic | * Traffic | ||
| Line 382: | Line 476: | ||
{{Div col|3}} | {{Div col|3}} | ||
=== A === | === A === | ||
* Angler | * [[Alpha Pack]] | ||
* [[Angler]] | |||
* [[Archie]] | |||
* [[Assoc AID]] | |||
* [[Astrum]] | |||
=== B === | === B === | ||
* Best | * [[Best]] | ||
* Blackhole | * [[Black Dragon]] | ||
* Bleeding Life | * [[Blackhole]] | ||
* [[Bleeding Life]] | |||
=== C === | === C === | ||
* ChePack | * [[ChePack]] | ||
* Cool Exploit Kit | * [[CkVip]] | ||
* CritXPack | * [[Cool Exploit Kit]] | ||
* [[Cool Pack]] | |||
* [[CritXPack]] / [[Vintage Pack]] | |||
=== D === | |||
* [[Dotkachef]] | |||
=== E === | === E === | ||
* EgyPack | * [[EgyPack]] | ||
* Eleonore | * [[Eleonore]] | ||
=== F === | === F === | ||
* Flimkit | * [[Fiesta]] | ||
* Fragus | * [[Flash (Exploit kit)]] | ||
* [[Flimkit]] | |||
* [[Fragus]] | |||
=== G === | === G === | ||
* Gong Da / Gongdad | * [[Glazunov]] | ||
* GrandSoft | * [[Gong Da]] / [[Gongdad]] | ||
* [[GrandSoft]] | |||
=== H === | |||
* [[Hanjuan]] | |||
* [[Hierarchy]] | |||
=== I === | === I === | ||
* Impact | * [[Impact]] | ||
* Incognito | * [[Incognito]] | ||
* [[Infinity (Exploit kit)]] | |||
=== K === | === K === | ||
* KaiXin / Gondad | * [[KaiXin]] / [[Gondad]] | ||
* | * [[Kore]] | ||
=== L === | |||
* [[LightsOut]] | |||
=== M === | === M === | ||
* Mushroom | * [[Magnitude]] | ||
* [[MPack]] | |||
* [[Mushroom]] | |||
=== N === | === N === | ||
* Neutrino | * [[NeoSploit]] | ||
* Nice | * [[Neutrino]] | ||
* Nuclear Pack | * [[Nice]] | ||
* [[Niteris]] | |||
* [[Nuclear Pack]] | |||
* [[Null Hole]] | |||
=== P === | === P === | ||
* Phoenix | * [[Phoenix]] | ||
* [[Private EK]] | |||
* [[ProPack]] | |||
=== R === | === R === | ||
* Red Dot | * [[Red Dot]] | ||
* RedKit | * [[RedKit]] / [[Goon]], [[Puerto]] | ||
* [[RIG]] | |||
=== S === | === S === | ||
* Sakura | * [[Sakura]] | ||
* Sava | * [[Sava]] | ||
* Serenity | * [[Serenity]] / [[Serenity Pack]] | ||
* Sibhost / Kore | * [[Siberia]] / [[Siberia Private]] | ||
* Sweet Orange | * [[Sibhost]] / [[Kore]], [[Urausy EK]], [[BestAV EK]] | ||
* [[SofosFO]] | |||
* [[Spartan]] | |||
* [[SPL Pack]] | |||
* [[Styx]] / [[Kein]] | |||
* [[Sundown]] | |||
* [[Sweet Orange]] | |||
=== T === | === T === | ||
* T-Pack | * [[T-Pack]] | ||
* [[Techno XPack]] | |||
=== V === | === V === | ||
* Vintage Pack | * [[Vintage Pack]] | ||
=== X === | |||
* [[x2o]] / [[Redkit light]] | |||
=== Y === | |||
* [[Yang Pack]] | |||
=== Z === | |||
* [[Zhi Zhu]] | |||
{{Div col end}} | {{Div col end}} | ||
== Malware and botnet related Services == | == Malware and botnet related Services == | ||
=== C === | === C === | ||
* Check4Me | * [[Check4Me]] | ||
=== I === | === I === | ||
* Iframeshop | * [[Iframeshop]] | ||
=== P === | === P === | ||
* Prepaidex | * [[Prepaidex]] | ||
=== S === | === S === | ||
* Scan4you | * [[Scan4you]] | ||
* SollHost | * [[SollHost]] | ||
Revision as of 16:10, 12 May 2019
Thank you for your patience, the botnets.fr Wiki is being rebuilt (the previous wiki is still available at https://www.botnets.fr/wiki.old)
Introduction
This semantic Wiki is developed since November 2011 in the context of a PhD work on the fight against botnets conducted at the LIP 6 laboratory in Paris (Complex networks team). The PhD was successfully defended in November 2015 in Paris, France. But work continues...
Botnets
A
- AbaddonPOS
- Accdfisa
- Acebot
- Ackposts
- Admin.HLP
- Adneukine
- Adrenalin
- Agobot / Gaobot Related families: Phatbot, Forbot, Polybot, XtremBot
- Ainslot
- Akbot / Qakbot, Pinkslipbot, Qbot
- Aldi
- Alebrije
- AlertLock
- Alina
- Alphacrypt
- Alureon / Olmarik, TDSS, TDL, Popureb
- Americana Dreams
- Andromeda / Gamarue
- AnnLoader
- Apbot
- Arcom
- Asprox / Badsrc, Aseljo
- Athena
- Atrax
- Avalanche
- Avatar
- Avzahn
B
- Backscript
- Backoff
- Bagle / Beagle, Mitglieder, Lodeight
- Bahama
- Bamital
- Barracuda
- Bashlight
- Bedep
- Beebone / Symmi, Changeup, Vobfus
- Bereb / Related to Kiribot
- BernhardPOS
- BlackEnergy
- BlackPOS / Dump Memory Grabber
- BlackShades
- Bmaster
- Bobax / Bobic, Oderoor, Cotmonger, Hacktool.Spammer, Kraken
- Bomba Locker
- Boxer
- Bozok
- Bredolab
- BrutPOS
C
- Carbanak
- Carberp / Caberp, Syscron
- Carna
- Casier
- Cbeplay.P
- Cerber
- Cerberus
- Chameleon
- ChewBacca
- Chidol
- Chthonic
- Cimbot
- Citadel
- Clampi / Ligats, Ilomo or Rscan
- Coinbitclip
- CoinVault
- Comfoo
- Conficker / Downup, Downadup, Kido
- CoreBot
- Coreflood
- Coverton
- Cridex / Bugat, Feodo
- Critroni / CTB-Locker
- Cryakl / Fantomas
- CryptoDefense
- CryptoLocker
- Cryptoblocker
- CryptXXX
- Cutwail / Pandex, Mutant
- Cythosia
D
- Daredevil
- DaRK DDoSseR
- Dark-Mailer
- DarkComet
- DarkMegi
- Darkness / Optima, Votwup
- Decebal
- Destory
- Devdar
- Dexter
- Dharma
- Dirt Jumper
- Disker
- DistTrack
- Dldr.Agent.JKH
- Dlena
- Donbot / Bachsoy, Buzus
- Dorifel / Quervar, XDocCrypt
- Dorkbot / Nrgbot, Ngrbot
- Duqu
- Dyre / Dyreza, Dyzap, Dyranges
E
F
- Fakavalert
- FakeM
- Feederbot
- Festi
- Fivetoone / DMSpammer
- Flagui
- Flame / Flamer, sKyWIper
- Flashback / Flashfake
- Flimrans
- Foag
- Forbot
- FrameworkPOS
- Frutas
- Fuflo
G
- Galock
- GamaPoS
- Gameover / P2P ZeuS
- Gammima
- Gapz
- Gauss
- Gbot
- Gema
- Gendarmerie
- Generetic
- Getmypass
- Gheg / Tofsee, Mondera
- Gimemo
- Gh0st RAT
- GlassRAT
- Goldenbaks
- GootKit
- Goscri
- Gozi / Ursnif, Prinimalka, Vawtrak
- Gpcode
- GranCrab / GandCrab
- Grum / Tedroo
- Gumblar
H
- Hamweq
- HangOver
- Harasom
- Harnig / Piptea
- HelloGirl
- Heloag
- Hermes
- HerpesNet
- Hesperbot
- Hikit
- Hiloti
- Hodprot
- H-Worm
I
J
K
L
M
- Maazben
- Madi
- Makadocs
- Malex
- MalumPoS
- Mariachi
- Mariposa
- MDK
- Mebromi
- Medfos / Midhos
- Mega-D / Ozdok
- Mehika / TwitterBot, Hittler
- Metulji / EvilFistSquad
- MiniDuke
- Mirage
- Mirai
- Mlano
- Mocbot / Wargbot, Graweg
- ModPOS
- Monkif / ExeDot, DIKhora
- MP-DDoser
- Multi-Locker
- Murofet / Licat
- Mytob
N
- NanoCore
- Nemucod
- Netsky
- Nertra
- NetTraveler
- NewPOSThings
- Ngrbot
- NitlovePOS
- Nitol
- Nitro
- NjRAT / Variant: H-Worm
- Njw0rm
- Nucrypt / Loosky, Locksky
- Nugache
- Nymaim
O
P
- Pandora
- Patcher / Multibanker, Bankpatcher
- Petya
- Pexby
- Phatbot
- PiceBOT
- PickPocket
- Pinkslipbot
- Pirpi
- Pitou
- PlugX / Korplug, Gulpix
- Pobelka
- Poebot / W32/Linkbot
- Poison Ivy
- PokerAgent
- Polybot
- Ponmocup / Pirminay, Swisyn, Vundo
- Pony / Fareit
- Poof
- Poseidon
- Power Bot
- Pramro
- PrettyPark
- Prinimalka
- Psybot
- PTA
- Punkey
- Pushdo
Q
R
- Ramnit
- Ranbyus
- Ranky
- Rannoh / Matsnu
- Ransom.EY
- Ransom.HY
- Ransom.IF
- Ransom.II
- Ransom.JU
- Raxm
- Rdasrv
- Regin
- Reposin
- Revenge RAT
- Reveton
- Revoyem
- Rocra
- Rustock / RKRustok, Costrat, Meredrop
S
- Sage
- Sality
- SamSam
- Sasser
- ScarePakage
- Sdbot
- Shifu
- Shylock / Caphaw
- Silence Locker
- Silent Winlocker
- Silon
- Simda
- Simplocker
- Sinit
- Sinowal / Mebroot, Rootkit MBR, Bootkit (botnet)
- Sir DoOom
- Skunkx
- Slapper
- Smoke Bot
- SMSZombie
- Snap
- Sobig / Palyh
- Solar / Napolar
- Sopelka
- Soraya
- Spachanel
- SpamSoldier
- SpamThru / Spam-DComServ, Covesmer, Xmiler
- Spark
- SpyEye
- SpyBot / SDBot, Rbot, UrBot, UrXBot
- Srizbi / Cbeplay, Exchanger
- Storm / Nuwar, Peacomm, Zhelatin, Tibs
- Stration / Warezov, Opnis
- Studma
- Supern0va
- Swizzor
- Sykipot
- SynoLocker
T
- TDL-4 / TDL-3, TDSS, DGAv14
- Taidoor
- Tatanarg
- Tatanga
- Tequila
- TeslaCrypt
- The Mask
- Thor
- TidServ
- Tigger / Syzor
- Tilon
- Tinba / Gataka
- TinyNuke
- Tobfy
- Tobfy.N
- Torpig
- TorrentLocker
- Travnet
- TreasureHunt
- Turla / Uroburos, Snake
- Twitter based botnet
U
V
W
- Waledac / Waled, SLM, Kelihos, Hilux, Hlux, Nap
- Wannacry
- Warezov
- Warbot
- Weelsof
- Wigon
- Wiper
- Wirenet
- Wopla / Pokier, Slogger
X
Y
Z
Campaigns
Groups
- Banking
- Click frauding
- DDoSing
- Ransomware
- RAT / Remote administration trojan
- Spying
- Spamming
- Stealing
Criminal services
- Bulletproof hosting
- DDoSing / Stress test
- Encryption
- Exchange
- Mules
- Pay-per-install
- Security software check
- Traffic
- VPN
Panels
Z
Exploit kits/packs
A
B
C
D
E
F
G
H
I
K
L
M
N
P
R
S
- Sakura
- Sava
- Serenity / Serenity Pack
- Siberia / Siberia Private
- Sibhost / Kore, Urausy EK, BestAV EK
- SofosFO
- Spartan
- SPL Pack
- Styx / Kein
- Sundown
- Sweet Orange