Malware Tracker
Tracking active malware infrastructure: C2 servers that malware phones home to, and distribution hosts that deliver payloads. Updated daily from sandbox analysis and community threat intel.
92
Families Tracked (7d)
1,685
Active C2 Hosts (7d)
8,122
Active Distribution Hosts (7d)
C2 Infrastructure Type (7d)
Hosting 88% (1,485)
ISP 10% (162)
Unknown 2% (26)
Business 1% (12)
Distribution Infrastructure Type (7d)
Hosting 89% (7,266)
ISP 10% (831)
Business 0% (14)
Education 0% (5)
Unknown 0% (5)
Government 0% (1)
C2 Hosting Countries (7d)
Country Hosts
- 1 🇺🇸 US 1,048
- 2 🇨🇳 CN 101
- 3 🇭🇰 HK 53
- 4 🇩🇪 DE 51
- 5 🇬🇧 GB 44
- 6 🇸🇨 SC 42
- 7 🇷🇺 RU 38
- 8 🇫🇷 FR 26
- 9 🇸🇬 SG 23
- 10 🇻🇳 VN 19
- 11 Other 240
C2 Hosting Providers (7d)
Provider Hosts
- 1 Cloudflare, Inc. 507
- 2 GNET INC. 200
- 3 DigitalOcean, LLC 76
- 4 Shenzhen Tencent Computer Systems Company Limited 38
- 5 Hangzhou Alibaba Advertising Co.,Ltd. 31
- 6 Hetzner Online GmbH 26
- 7 Omegatech LTD 21
- 8 Amazon.com, Inc. 19
- 9 CTG Server Limited 18
- 10 HostPapa 16
- 11 Other providers 733
Distribution Countries (7d)
Country Hosts
- 1 🇺🇸 US 4,379
- 2 🇩🇪 DE 1,742
- 3 🇨🇳 CN 504
- 4 🇬🇧 GB 347
- 5 🇨🇾 CY 212
- 6 🇪🇸 ES 175
- 7 🇫🇷 FR 94
- 8 🇸🇬 SG 82
- 9 🇮🇳 IN 43
- 10 🇮🇹 IT 37
- 11 Other 507
Distribution Providers (7d)
Provider Hosts
- 1 Cloudflare, Inc. 3,003
- 2 IONOS SE 1,602
- 3 CHINA UNICOM China169 Backbone 432
- 4 Wildcard UK Limited 255
- 5 Hostinger International Limited 212
- 6 AIRE NETWORKS DEL MEDITERRANEO SL UNIPERSONAL 158
- 7 Oracle Corporation 147
- 8 Amazon.com, Inc. 138
- 9 Namecheap, Inc. 127
- 10 Google LLC 115
- 11 Other providers 1,933
Top Malware by Unique C2 (7d)
Top Malware by Unique C2 (24h)
All Tracked Malware (7d)
1–25 of 92 families
| Trend | |||
|---|---|---|---|
| AsyncRAT | 454 | stable | Jul 13, 2026 |
| VShell | 240 | trending up | Jul 13, 2026 |
| Quasar RAT | 138 | stable | Jul 13, 2026 |
| Remcos | 95 | trending down | Jul 13, 2026 |
| Cobalt Strike | 70 | trending down | Jul 13, 2026 |
| XWorm | 50 | trending down | Jul 13, 2026 |
| Aisuru | 47 | trending up | Jul 13, 2026 |
| Vidar | 47 | trending down | Jul 13, 2026 |
| DCRat | 36 | trending down | Jul 13, 2026 |
| Mirai | 25 | trending up | Jul 13, 2026 |
| AdaptixC2 | 21 | trending up | Jul 12, 2026 |
| Kimwolf | 20 | stable | Jul 13, 2026 |
| StealC | 19 | trending up | Jul 13, 2026 |
| ValleyRAT | 19 | stable | Jul 13, 2026 |
| NonEuclid RAT | 18 | trending up | Jul 13, 2026 |
| Clickfix | 16 | trending up | Jul 13, 2026 |
| Agent Tesla | 15 | trending down | Jul 11, 2026 |
| AIRASHI | 15 | trending down | Jul 13, 2026 |
| Overlord RAT | 14 | trending down | Jul 13, 2026 |
| Nanocore RAT | 13 | trending down | Jul 12, 2026 |
| Remus | 10 | trending down | Jul 13, 2026 |
| Havoc | 9 | trending down | Jul 13, 2026 |
| Meterpreter | 9 | trending up | Jul 13, 2026 |
| Pikabot | 9 | stable | Jul 10, 2026 |
| RatonRAT | 9 | trending down | Jul 13, 2026 |
| ACR Stealer | 8 | trending down | Jul 11, 2026 |
| Evilginx | 8 | stable | Jul 13, 2026 |
| NjRAT | 8 | trending down | Jul 13, 2026 |
| KongTuke | 7 | trending up | Jul 11, 2026 |
| Socks5 Systemz | 7 | trending up | Jul 13, 2026 |
| PureLogs Stealer | 6 | stable | Jul 11, 2026 |
| RedLine Stealer | 6 | trending down | Jul 12, 2026 |
| ClearFake | 5 | trending down | Jul 8, 2026 |
| FAKEUPDATES | 5 | trending down | Jul 11, 2026 |
| HijackLoader | 5 | trending down | Jul 13, 2026 |
| BADBOX | 4 | stable | Jul 11, 2026 |
| Cameleon | 4 | trending down | Jul 12, 2026 |
| Gozi | 4 | stable | Jul 11, 2026 |
| NetSupportManager RAT | 4 | trending down | Jul 11, 2026 |
| Sliver | 4 | trending down | Jul 12, 2026 |
| Venom RAT | 4 | trending down | Jul 11, 2026 |
| Warzone | 4 | trending up | Jul 9, 2026 |
| GCleaner | 3 | trending down | Jul 12, 2026 |
| Hook | 3 | stable | Jul 12, 2026 |
| PureRAT | 3 | stable | Jul 9, 2026 |
| SectopRAT | 3 | trending down | Jul 11, 2026 |
| SmokeLoader | 3 | trending down | Jul 11, 2026 |
| Triada | 3 | stable | Jul 13, 2026 |
| Tsundere | 3 | trending down | Jul 10, 2026 |
| Azorult | 2 | stable | Jul 9, 2026 |
| BianLian | 2 | stable | Jul 11, 2026 |
| Brute Ratel C4 | 2 | stable | Jul 10, 2026 |
| Clipper | 2 | stable | Jul 13, 2026 |
| EtherRAT | 2 | stable | Jul 11, 2026 |
| Ghost RAT | 2 | stable | Jul 10, 2026 |
| neshta | 2 | stable | Jul 10, 2026 |
| STRRAT | 2 | stable | Jul 8, 2026 |
| Amadey | 1 | stable | Jul 8, 2026 |
| Amatera | 1 | stable | Jul 7, 2026 |
| Arkei Stealer | 1 | stable | Jul 7, 2026 |
| Berbew | 1 | stable | Jul 10, 2026 |
| BitRAT | 1 | stable | Jul 7, 2026 |
| BlankGrabber | 1 | stable | Jul 7, 2026 |
| CloudEyE | 1 | stable | Jul 7, 2026 |
| CoffeeLoader | 1 | stable | Jul 7, 2026 |
| CountLoader | 1 | stable | Jul 9, 2026 |
| Crimson RAT | 1 | stable | Jul 7, 2026 |
| DarkGate | 1 | stable | Jul 11, 2026 |
| GRUNT | 1 | stable | Jul 11, 2026 |
| Houdini | 1 | stable | Jul 10, 2026 |
| Kaiji | 1 | stable | Jul 7, 2026 |
| Kinsing | 1 | stable | Jul 13, 2026 |
| Loki Password Stealer (PWS) | 1 | stable | Jul 10, 2026 |
| N-W0rm | 1 | stable | Jul 10, 2026 |
| NightshadeC2 | 1 | stable | Jul 10, 2026 |
| Pay2Key | 1 | stable | Jul 11, 2026 |
| Payload | 1 | stable | Jul 7, 2026 |
| Pony | 1 | stable | Jul 11, 2026 |
| PoshC2 | 1 | stable | Jul 9, 2026 |
| pupy | 1 | stable | Jul 7, 2026 |
| PurpleFox | 1 | stable | Jul 10, 2026 |
| Redosdru | 1 | stable | Jul 7, 2026 |
| Rhadamanthys | 1 | stable | Jul 7, 2026 |
| RMS | 1 | stable | Jul 10, 2026 |
| Satacom | 1 | stable | Jul 9, 2026 |
| SnappyClient | 1 | stable | Jul 13, 2026 |
| SpyNote | 1 | stable | Jul 7, 2026 |
| Stealerium | 1 | stable | Jul 9, 2026 |
| SVCStealer | 1 | stable | Jul 7, 2026 |
| Umbral | 1 | stable | Jul 8, 2026 |
| VIP Keylogger | 1 | stable | Jul 7, 2026 |
| Vjw0rm | 1 | stable | Jul 10, 2026 |
AsyncRAT 454 C2 · Jul 13, 2026 VShell 240 C2 · Jul 13, 2026 Quasar RAT 138 C2 · Jul 13, 2026 Remcos 95 C2 · Jul 13, 2026 Cobalt Strike 70 C2 · Jul 13, 2026 XWorm 50 C2 · Jul 13, 2026 Aisuru 47 C2 · Jul 13, 2026 Vidar 47 C2 · Jul 13, 2026 DCRat 36 C2 · Jul 13, 2026 Mirai 25 C2 · Jul 13, 2026 AdaptixC2 21 C2 · Jul 12, 2026 Kimwolf 20 C2 · Jul 13, 2026 StealC 19 C2 · Jul 13, 2026 ValleyRAT 19 C2 · Jul 13, 2026 NonEuclid RAT 18 C2 · Jul 13, 2026 Clickfix 16 C2 · Jul 13, 2026 Agent Tesla 15 C2 · Jul 11, 2026 AIRASHI 15 C2 · Jul 13, 2026 Overlord RAT 14 C2 · Jul 13, 2026 Nanocore RAT 13 C2 · Jul 12, 2026 Remus 10 C2 · Jul 13, 2026 Havoc 9 C2 · Jul 13, 2026 Meterpreter 9 C2 · Jul 13, 2026 Pikabot 9 C2 · Jul 10, 2026 RatonRAT 9 C2 · Jul 13, 2026 ACR Stealer 8 C2 · Jul 11, 2026 Evilginx 8 C2 · Jul 13, 2026 NjRAT 8 C2 · Jul 13, 2026 KongTuke 7 C2 · Jul 11, 2026 Socks5 Systemz 7 C2 · Jul 13, 2026 PureLogs Stealer 6 C2 · Jul 11, 2026 RedLine Stealer 6 C2 · Jul 12, 2026 ClearFake 5 C2 · Jul 8, 2026 FAKEUPDATES 5 C2 · Jul 11, 2026 HijackLoader 5 C2 · Jul 13, 2026 BADBOX 4 C2 · Jul 11, 2026 Cameleon 4 C2 · Jul 12, 2026 Gozi 4 C2 · Jul 11, 2026 NetSupportManager RAT 4 C2 · Jul 11, 2026 Sliver 4 C2 · Jul 12, 2026 Venom RAT 4 C2 · Jul 11, 2026 Warzone 4 C2 · Jul 9, 2026 GCleaner 3 C2 · Jul 12, 2026 Hook 3 C2 · Jul 12, 2026 PureRAT 3 C2 · Jul 9, 2026 SectopRAT 3 C2 · Jul 11, 2026 SmokeLoader 3 C2 · Jul 11, 2026 Triada 3 C2 · Jul 13, 2026 Tsundere 3 C2 · Jul 10, 2026 Azorult 2 C2 · Jul 9, 2026 BianLian 2 C2 · Jul 11, 2026 Brute Ratel C4 2 C2 · Jul 10, 2026 Clipper 2 C2 · Jul 13, 2026 EtherRAT 2 C2 · Jul 11, 2026 Ghost RAT 2 C2 · Jul 10, 2026 neshta 2 C2 · Jul 10, 2026 STRRAT 2 C2 · Jul 8, 2026 Amadey 1 C2 · Jul 8, 2026 Amatera 1 C2 · Jul 7, 2026 Arkei Stealer 1 C2 · Jul 7, 2026 Berbew 1 C2 · Jul 10, 2026 BitRAT 1 C2 · Jul 7, 2026 BlankGrabber 1 C2 · Jul 7, 2026 CloudEyE 1 C2 · Jul 7, 2026 CoffeeLoader 1 C2 · Jul 7, 2026 CountLoader 1 C2 · Jul 9, 2026 Crimson RAT 1 C2 · Jul 7, 2026 DarkGate 1 C2 · Jul 11, 2026 GRUNT 1 C2 · Jul 11, 2026 Houdini 1 C2 · Jul 10, 2026 Kaiji 1 C2 · Jul 7, 2026 Kinsing 1 C2 · Jul 13, 2026 Loki Password Stealer (PWS) 1 C2 · Jul 10, 2026 N-W0rm 1 C2 · Jul 10, 2026 NightshadeC2 1 C2 · Jul 10, 2026 Pay2Key 1 C2 · Jul 11, 2026 Payload 1 C2 · Jul 7, 2026 Pony 1 C2 · Jul 11, 2026 PoshC2 1 C2 · Jul 9, 2026 pupy 1 C2 · Jul 7, 2026 PurpleFox 1 C2 · Jul 10, 2026 Redosdru 1 C2 · Jul 7, 2026 Rhadamanthys 1 C2 · Jul 7, 2026 RMS 1 C2 · Jul 10, 2026 Satacom 1 C2 · Jul 9, 2026 SnappyClient 1 C2 · Jul 13, 2026 SpyNote 1 C2 · Jul 7, 2026 Stealerium 1 C2 · Jul 9, 2026 SVCStealer 1 C2 · Jul 7, 2026 Umbral 1 C2 · Jul 8, 2026 VIP Keylogger 1 C2 · Jul 7, 2026 Vjw0rm 1 C2 · Jul 10, 2026