| | Description |
|---|
| Adware | |
| Banking | Banking malware collect online banking credentials or help criminals take control of existing connections. |
| Click frauding | |
| Cryptocurrency mining | |
| Cryptolocker | |
| DDoSing | |
| Destructive | |
| Distributed calculation | |
| Downloading | These botnets are also called "loaders" and are used for pay-per-install operations. |
| Fake antivirus | |
| Lawful interception | |
| Not witnessed yet | |
| Pharming (group) | |
| Point-of-sale | Point-of-sale botnets: target credit card and other personal data on POS terminals. |
| Police lock | |
| Premium rate | |
| Probing | |
| Proxying | Create an infrastructure to proxy attacks, command a botnet through a first level of proxies. |
| RAT | Remote administration trojans |
| Ransomware | |
| Server attack | Automatic scan and attack of servers, mostly webservers, using SQL injections, known vulnerabilities, brute force, etc. |
| Spamming | |
| Spying | Involves RATs and Rootkits |
| Stealing | |
| Trojan | |