Malware Tracker
Tracking active malware infrastructure: C2 servers that malware phones home to, and distribution hosts that deliver payloads. Updated daily from sandbox analysis and community threat intel.
126
Families Tracked (7d)
2,225
Active C2 Hosts (7d)
1,168
Active Distribution Hosts (7d)
C2 Infrastructure Type (7d)
Hosting 93% (2,074)
ISP 6% (123)
Business 1% (18)
Unknown 0% (5)
Government 0% (3)
Education 0% (2)
Distribution Infrastructure Type (7d)
ISP 65% (762)
Hosting 34% (400)
Business 1% (6)
C2 Hosting Countries (7d)
Country Hosts
- 1 🇺🇸 US 1,378
- 2 🇩🇪 DE 152
- 3 🇫🇷 FR 119
- 4 🇨🇳 CN 97
- 5 🇬🇧 GB 64
- 6 🇭🇰 HK 52
- 7 🇷🇺 RU 47
- 8 🇸🇨 SC 27
- 9 🇮🇱 IL 23
- 10 🇨🇦 CA 21
- 11 Other 245
C2 Hosting Providers (7d)
Provider Hosts
- 1 Cloudflare, Inc. 1,057
- 2 OVH SAS 108
- 3 Hetzner Online GmbH 49
- 4 DigitalOcean, LLC 45
- 5 IONOS SE 40
- 6 Shenzhen Tencent Computer Systems Company Limited 28
- 7 Emil Vitukhnovskii trading as Great Flower 23
- 8 Hangzhou Alibaba Advertising Co.,Ltd. 23
- 9 HostPapa 20
- 10 Omegatech LTD 18
- 11 Other providers 814
Distribution Countries (7d)
Country Hosts
- 1 🇨🇳 CN 664
- 2 🇺🇸 US 290
- 3 🇬🇧 GB 30
- 4 🇵🇰 PK 21
- 5 🇰🇳 KN 20
- 6 🇮🇳 IN 19
- 7 🇷🇺 RU 19
- 8 🇩🇪 DE 12
- 9 🇭🇰 HK 7
- 10 🇫🇷 FR 6
- 11 Other 80
Distribution Providers (7d)
Provider Hosts
- 1 CHINA UNICOM China169 Backbone 601
- 2 Cloudflare, Inc. 190
- 3 China Unicom IP network China169 Guangdong province 31
- 4 CHINANET BACKBONE 23
- 5 SKN Subnet & Telecom Ltd 20
- 6 HostPapa 18
- 7 National WiMAX/IMS environment 18
- 8 Amazon.com, Inc. 17
- 9 QWINS LTD 13
- 10 National Internet Backbone 12
- 11 Other providers 225
Top Malware by Unique C2 (7d)
Top Malware by Unique C2 (24h)
All Tracked Malware (7d)
1–25 of 126 families
| Trend | |||
|---|---|---|---|
| AsyncRAT | 503 | stable | Jun 17, 2026 |
| ClearFake | 369 | trending down | Jun 17, 2026 |
| Quasar RAT | 150 | trending up | Jun 17, 2026 |
| StrelaStealer | 141 | trending down | Jun 15, 2026 |
| Nanocore RAT | 111 | stable | Jun 17, 2026 |
| Cobalt Strike | 102 | trending down | Jun 17, 2026 |
| Vidar | 87 | trending up | Jun 17, 2026 |
| Remcos | 86 | stable | Jun 17, 2026 |
| Mirai | 56 | trending up | Jun 16, 2026 |
| VShell | 50 | trending down | Jun 17, 2026 |
| AdaptixC2 | 36 | trending down | Jun 17, 2026 |
| StealC | 34 | trending down | Jun 17, 2026 |
| XWorm | 33 | trending down | Jun 17, 2026 |
| Sliver | 30 | trending down | Jun 16, 2026 |
| DCRat | 21 | trending down | Jun 17, 2026 |
| SmokeLoader | 19 | trending down | Jun 15, 2026 |
| RedTail | 18 | trending down | Jun 15, 2026 |
| KongTuke | 13 | trending down | Jun 17, 2026 |
| ValleyRAT | 13 | trending down | Jun 17, 2026 |
| xmrig | 13 | trending up | Jun 16, 2026 |
| Havoc | 12 | trending down | Jun 17, 2026 |
| Donutloader | 11 | trending down | Jun 16, 2026 |
| Quasarrat | 11 | trending down | Jun 17, 2026 |
| Remus Stealer | 11 | trending down | Jun 17, 2026 |
| RedLine Stealer | 10 | trending down | Jun 13, 2026 |
| Overlord RAT | 9 | trending down | Jun 17, 2026 |
| SmartApeSG | 9 | trending down | Jun 17, 2026 |
| Amadey | 8 | trending down | Jun 16, 2026 |
| BianLian | 8 | stable | Jun 17, 2026 |
| Evilginx | 8 | trending down | Jun 17, 2026 |
| Lumma Stealer | 8 | stable | Jun 12, 2026 |
| Meterpreter | 8 | trending down | Jun 17, 2026 |
| SectopRAT | 8 | trending down | Jun 13, 2026 |
| Meterpreter | 7 | trending up | Jun 15, 2026 |
| Sheetrat | 7 | trending down | Jun 17, 2026 |
| Chaos | 6 | trending down | Jun 15, 2026 |
| Empire Downloader | 6 | stable | Jun 11, 2026 |
| EtherRAT | 6 | stable | Jun 12, 2026 |
| FAKEUPDATES | 6 | trending down | Jun 17, 2026 |
| Meshagent | 6 | trending down | Jun 14, 2026 |
| RatonRAT | 6 | trending down | Jun 16, 2026 |
| SpyNote | 6 | trending down | Jun 16, 2026 |
| Wannacry | 6 | trending up | Jun 12, 2026 |
| XRed | 6 | trending up | Jun 12, 2026 |
| Ades Stealer | 5 | trending up | Jun 12, 2026 |
| Discordrat | 5 | trending up | Jun 12, 2026 |
| DragonForce | 5 | trending up | Jun 12, 2026 |
| GCleaner | 5 | trending up | Jun 12, 2026 |
| Ghost RAT | 5 | trending up | Jun 12, 2026 |
| HiddenTear | 5 | trending up | Jun 12, 2026 |
| Jlocker | 5 | trending up | Jun 12, 2026 |
| LockBit | 5 | trending up | Jun 12, 2026 |
| MASS Logger | 5 | trending up | Jun 12, 2026 |
| Modiloader | 5 | trending up | Jun 12, 2026 |
| Onlylogger | 5 | trending up | Jun 12, 2026 |
| RokRAT | 5 | trending up | Jun 12, 2026 |
| SalatStealer | 5 | trending up | Jun 12, 2026 |
| Umbral | 5 | trending up | Jun 12, 2026 |
| ValleyRAT | 5 | trending up | Jun 14, 2026 |
| VIP Keylogger | 5 | trending up | Jun 12, 2026 |
| Wshrat | 5 | trending up | Jun 12, 2026 |
| Xorist | 5 | trending up | Jun 12, 2026 |
| Exelastealer | 4 | trending up | Jun 12, 2026 |
| Kimwolf | 4 | stable | Jun 17, 2026 |
| NjRAT | 4 | trending down | Jun 15, 2026 |
| PureLogs Stealer | 4 | stable | Jun 16, 2026 |
| Revenge RAT | 4 | trending up | Jun 12, 2026 |
| RONINGLOADER | 4 | trending up | Jun 12, 2026 |
| SPICA | 4 | stable | Jun 15, 2026 |
| DarkComet | 3 | trending down | Jun 15, 2026 |
| Kimsuky | 3 | stable | Jun 14, 2026 |
| ACR Stealer | 2 | stable | Jun 14, 2026 |
| AMOS | 2 | stable | Jun 11, 2026 |
| Datzbro | 2 | stable | Jun 16, 2026 |
| DeimosC2 | 2 | stable | Jun 17, 2026 |
| Formbook | 2 | stable | Jun 11, 2026 |
| Kinsing | 2 | stable | Jun 16, 2026 |
| LokiBot | 2 | stable | Jun 13, 2026 |
| MetaStealer | 2 | stable | Jun 15, 2026 |
| MimiKatz | 2 | stable | Jun 12, 2026 |
| Netsupport | 2 | stable | Jun 12, 2026 |
| Satacom | 2 | stable | Jun 14, 2026 |
| Stormkitty | 2 | stable | Jun 13, 2026 |
| SVCStealer | 2 | stable | Jun 15, 2026 |
| Venomrat | 2 | stable | Jun 17, 2026 |
| Vertexnet | 2 | stable | Jun 12, 2026 |
| Vjw0rm | 2 | stable | Jun 17, 2026 |
| Warzonerat | 2 | stable | Jun 12, 2026 |
| 44caliber | 1 | stable | Jun 12, 2026 |
| Agent Tesla | 1 | stable | Jun 15, 2026 |
| BeaverTail | 1 | stable | Jun 17, 2026 |
| BitRAT | 1 | stable | Jun 12, 2026 |
| BlankGrabber | 1 | stable | Jun 12, 2026 |
| Botnetdomain | 1 | stable | Jun 16, 2026 |
| Brute Ratel C4 | 1 | stable | Jun 16, 2026 |
| Clickfix | 1 | stable | Jun 13, 2026 |
| CloudEyE | 1 | stable | Jun 11, 2026 |
| Copybara | 1 | stable | Jun 13, 2026 |
| CustomerLoader | 1 | stable | Jun 16, 2026 |
| Cve202135394 | 1 | stable | Jun 13, 2026 |
| DanaBot | 1 | stable | Jun 17, 2026 |
| DeerStealer | 1 | stable | Jun 15, 2026 |
| Dharma | 1 | stable | Jun 12, 2026 |
| Gafgyt | 1 | stable | Jun 12, 2026 |
| Hive | 1 | stable | Jun 12, 2026 |
| Kaiji | 1 | stable | Jun 15, 2026 |
| Koi Loader | 1 | stable | Jun 12, 2026 |
| MooBot | 1 | stable | Jun 11, 2026 |
| Mythicapollo | 1 | stable | Jun 12, 2026 |
| NetSupportManager RAT | 1 | stable | Jun 17, 2026 |
| Onyxc2 | 1 | stable | Jun 11, 2026 |
| Oski Stealer | 1 | stable | Jun 12, 2026 |
| PureRAT | 1 | stable | Jun 11, 2026 |
| PurpleFox | 1 | stable | Jun 12, 2026 |
| Pwghost | 1 | stable | Jun 14, 2026 |
| r77 | 1 | stable | Jun 12, 2026 |
| RansomHub | 1 | stable | Jun 13, 2026 |
| Raworld | 1 | stable | Jun 12, 2026 |
| Remus | 1 | stable | Jun 14, 2026 |
| Rustme | 1 | stable | Jun 12, 2026 |
| ShadowPad | 1 | stable | Jun 11, 2026 |
| Stealer | 1 | stable | Jun 17, 2026 |
| Supershell | 1 | stable | Jun 12, 2026 |
| Tofsee | 1 | stable | Jun 12, 2026 |
| Tsunami | 1 | stable | Jun 12, 2026 |
| XenoRAT | 1 | stable | Jun 12, 2026 |
AsyncRAT 503 C2 · Jun 17, 2026 ClearFake 369 C2 · Jun 17, 2026 Quasar RAT 150 C2 · Jun 17, 2026 StrelaStealer 141 C2 · Jun 15, 2026 Nanocore RAT 111 C2 · Jun 17, 2026 Cobalt Strike 102 C2 · Jun 17, 2026 Vidar 87 C2 · Jun 17, 2026 Remcos 86 C2 · Jun 17, 2026 Mirai 56 C2 · Jun 16, 2026 VShell 50 C2 · Jun 17, 2026 AdaptixC2 36 C2 · Jun 17, 2026 StealC 34 C2 · Jun 17, 2026 XWorm 33 C2 · Jun 17, 2026 Sliver 30 C2 · Jun 16, 2026 DCRat 21 C2 · Jun 17, 2026 SmokeLoader 19 C2 · Jun 15, 2026 RedTail 18 C2 · Jun 15, 2026 KongTuke 13 C2 · Jun 17, 2026 ValleyRAT 13 C2 · Jun 17, 2026 xmrig 13 C2 · Jun 16, 2026 Havoc 12 C2 · Jun 17, 2026 Donutloader 11 C2 · Jun 16, 2026 Quasarrat 11 C2 · Jun 17, 2026 Remus Stealer 11 C2 · Jun 17, 2026 RedLine Stealer 10 C2 · Jun 13, 2026 Overlord RAT 9 C2 · Jun 17, 2026 SmartApeSG 9 C2 · Jun 17, 2026 Amadey 8 C2 · Jun 16, 2026 BianLian 8 C2 · Jun 17, 2026 Evilginx 8 C2 · Jun 17, 2026 Lumma Stealer 8 C2 · Jun 12, 2026 Meterpreter 8 C2 · Jun 17, 2026 SectopRAT 8 C2 · Jun 13, 2026 Meterpreter 7 C2 · Jun 15, 2026 Sheetrat 7 C2 · Jun 17, 2026 Chaos 6 C2 · Jun 15, 2026 Empire Downloader 6 C2 · Jun 11, 2026 EtherRAT 6 C2 · Jun 12, 2026 FAKEUPDATES 6 C2 · Jun 17, 2026 Meshagent 6 C2 · Jun 14, 2026 RatonRAT 6 C2 · Jun 16, 2026 SpyNote 6 C2 · Jun 16, 2026 Wannacry 6 C2 · Jun 12, 2026 XRed 6 C2 · Jun 12, 2026 Ades Stealer 5 C2 · Jun 12, 2026 Discordrat 5 C2 · Jun 12, 2026 DragonForce 5 C2 · Jun 12, 2026 GCleaner 5 C2 · Jun 12, 2026 Ghost RAT 5 C2 · Jun 12, 2026 HiddenTear 5 C2 · Jun 12, 2026 Jlocker 5 C2 · Jun 12, 2026 LockBit 5 C2 · Jun 12, 2026 MASS Logger 5 C2 · Jun 12, 2026 Modiloader 5 C2 · Jun 12, 2026 Onlylogger 5 C2 · Jun 12, 2026 RokRAT 5 C2 · Jun 12, 2026 SalatStealer 5 C2 · Jun 12, 2026 Umbral 5 C2 · Jun 12, 2026 ValleyRAT 5 C2 · Jun 14, 2026 VIP Keylogger 5 C2 · Jun 12, 2026 Wshrat 5 C2 · Jun 12, 2026 Xorist 5 C2 · Jun 12, 2026 Exelastealer 4 C2 · Jun 12, 2026 Kimwolf 4 C2 · Jun 17, 2026 NjRAT 4 C2 · Jun 15, 2026 PureLogs Stealer 4 C2 · Jun 16, 2026 Revenge RAT 4 C2 · Jun 12, 2026 RONINGLOADER 4 C2 · Jun 12, 2026 SPICA 4 C2 · Jun 15, 2026 DarkComet 3 C2 · Jun 15, 2026 Kimsuky 3 C2 · Jun 14, 2026 ACR Stealer 2 C2 · Jun 14, 2026 AMOS 2 C2 · Jun 11, 2026 Datzbro 2 C2 · Jun 16, 2026 DeimosC2 2 C2 · Jun 17, 2026 Formbook 2 C2 · Jun 11, 2026 Kinsing 2 C2 · Jun 16, 2026 LokiBot 2 C2 · Jun 13, 2026 MetaStealer 2 C2 · Jun 15, 2026 MimiKatz 2 C2 · Jun 12, 2026 Netsupport 2 C2 · Jun 12, 2026 Satacom 2 C2 · Jun 14, 2026 Stormkitty 2 C2 · Jun 13, 2026 SVCStealer 2 C2 · Jun 15, 2026 Venomrat 2 C2 · Jun 17, 2026 Vertexnet 2 C2 · Jun 12, 2026 Vjw0rm 2 C2 · Jun 17, 2026 Warzonerat 2 C2 · Jun 12, 2026 44caliber 1 C2 · Jun 12, 2026 Agent Tesla 1 C2 · Jun 15, 2026 BeaverTail 1 C2 · Jun 17, 2026 BitRAT 1 C2 · Jun 12, 2026 BlankGrabber 1 C2 · Jun 12, 2026 Botnetdomain 1 C2 · Jun 16, 2026 Brute Ratel C4 1 C2 · Jun 16, 2026 Clickfix 1 C2 · Jun 13, 2026 CloudEyE 1 C2 · Jun 11, 2026 Copybara 1 C2 · Jun 13, 2026 CustomerLoader 1 C2 · Jun 16, 2026 Cve202135394 1 C2 · Jun 13, 2026 DanaBot 1 C2 · Jun 17, 2026 DeerStealer 1 C2 · Jun 15, 2026 Dharma 1 C2 · Jun 12, 2026 Gafgyt 1 C2 · Jun 12, 2026 Hive 1 C2 · Jun 12, 2026 Kaiji 1 C2 · Jun 15, 2026 Koi Loader 1 C2 · Jun 12, 2026 MooBot 1 C2 · Jun 11, 2026 Mythicapollo 1 C2 · Jun 12, 2026 NetSupportManager RAT 1 C2 · Jun 17, 2026 Onyxc2 1 C2 · Jun 11, 2026 Oski Stealer 1 C2 · Jun 12, 2026 PureRAT 1 C2 · Jun 11, 2026 PurpleFox 1 C2 · Jun 12, 2026 Pwghost 1 C2 · Jun 14, 2026 r77 1 C2 · Jun 12, 2026 RansomHub 1 C2 · Jun 13, 2026 Raworld 1 C2 · Jun 12, 2026 Remus 1 C2 · Jun 14, 2026 Rustme 1 C2 · Jun 12, 2026 ShadowPad 1 C2 · Jun 11, 2026 Stealer 1 C2 · Jun 17, 2026 Supershell 1 C2 · Jun 12, 2026 Tofsee 1 C2 · Jun 12, 2026 Tsunami 1 C2 · Jun 12, 2026 XenoRAT 1 C2 · Jun 12, 2026