Malware types

112 families

Malware that gives an attacker covert, interactive remote control of an infected machine — files, keystrokes, webcam and shell.

92 families

Malware that harvests credentials, cookies, crypto wallets and autofill data from an infected host, often sold as a service.

67 families

Malware that encrypts or withholds access to data and demands payment, increasingly paired with data theft for double extortion.

63 families

Malware whose job is to gain a foothold and pull down further payloads — the delivery layer that precedes ransomware and espionage.

45 families

A network of compromised machines under common command, rented out for spam, DDoS, fraud, mining and malware distribution.

30 families

Surveillance malware that covertly monitors a target — messages, calls, location and microphone — often deployed against individuals.

12 families

Malware that steals financial credentials and manipulates online-banking sessions, often evolving into general-purpose loaders.

8 families

Self-replicating malware that spreads across networks and devices without user interaction, from classic internet worms to modern IoT botnets.

7 families

Destructive malware that irreversibly destroys data or systems — sometimes disguised as ransomware to delay attribution.

2 families

Malware that hides its presence deep in the operating system — kernel, bootloader or firmware — to maintain stealthy, persistent control.