Malware Tracker
Tracking active malware infrastructure: C2 servers that malware phones home to, and distribution hosts that deliver payloads. Updated daily from sandbox analysis and community threat intel.
85
Families Tracked (7d)
1,755
Active C2 Hosts (7d)
11,611
Active Distribution Hosts (7d)
C2 Infrastructure Type (7d)
Hosting 88% (1,553)
ISP 9% (156)
Unknown 2% (32)
Business 1% (13)
Government 0% (1)
Distribution Infrastructure Type (7d)
Hosting 84% (9,796)
ISP 10% (1,219)
Business 5% (526)
Unknown 1% (61)
Education 0% (8)
Government 0% (1)
C2 Hosting Countries (7d)
Country Hosts
- 1 🇺🇸 US 1,090
- 2 🇨🇳 CN 101
- 3 🇭🇰 HK 61
- 4 🇬🇧 GB 56
- 5 🇩🇪 DE 48
- 6 🇸🇨 SC 48
- 7 🇷🇺 RU 44
- 8 🇫🇷 FR 26
- 9 🇸🇬 SG 23
- 10 🇻🇳 VN 17
- 11 Other 241
C2 Hosting Providers (7d)
Provider Hosts
- 1 Cloudflare, Inc. 525
- 2 GNET INC. 230
- 3 DigitalOcean, LLC 84
- 4 Shenzhen Tencent Computer Systems Company Limited 35
- 5 Hangzhou Alibaba Advertising Co.,Ltd. 30
- 6 GLOBAL CONNECTIVITY SOLUTIONS LLP 21
- 7 Omegatech LTD 21
- 8 Amazon.com, Inc. 20
- 9 Hetzner Online GmbH 19
- 10 CTG Server Limited 17
- 11 Other providers 753
Distribution Countries (7d)
Country Hosts
- 1 🇺🇸 US 6,200
- 2 🇩🇪 DE 1,814
- 3 🇧🇩 BD 544
- 4 🇨🇳 CN 517
- 5 🇬🇧 GB 380
- 6 🇸🇨 SC 364
- 7 🇨🇾 CY 267
- 8 🇭🇰 HK 262
- 9 🇪🇸 ES 202
- 10 🇫🇷 FR 165
- 11 Other 896
Distribution Providers (7d)
Provider Hosts
- 1 Cloudflare, Inc. 4,191
- 2 IONOS SE 1,630
- 3 FAST ZONE IT 507
- 4 CHINA UNICOM China169 Backbone 439
- 5 Omegatech LTD 361
- 6 Cloudflare London, LLC 301
- 7 Hostinger International Limited 267
- 8 Wildcard UK Limited 256
- 9 CTG Server Limited 250
- 10 Oracle Corporation 212
- 11 Other providers 3,197
Top Malware by Unique C2 (7d)
Top Malware by Unique C2 (24h)
All Tracked Malware (7d)
1–25 of 85 families
| Trend | |||
|---|---|---|---|
| AsyncRAT | 496 | trending down | Jul 14, 2026 |
| VShell | 271 | trending up | Jul 14, 2026 |
| Quasar RAT | 134 | trending down | Jul 14, 2026 |
| Remcos | 83 | trending down | Jul 14, 2026 |
| Cobalt Strike | 62 | trending down | Jul 14, 2026 |
| Aisuru | 48 | trending down | Jul 14, 2026 |
| XWorm | 41 | stable | Jul 14, 2026 |
| Vidar | 38 | trending down | Jul 14, 2026 |
| Mirai | 33 | trending up | Jul 14, 2026 |
| AdaptixC2 | 31 | trending up | Jul 14, 2026 |
| DCRat | 27 | stable | Jul 13, 2026 |
| NonEuclid RAT | 23 | trending up | Jul 14, 2026 |
| Kimwolf | 20 | stable | Jul 13, 2026 |
| Clickfix | 16 | trending down | Jul 14, 2026 |
| StealC | 16 | trending down | Jul 13, 2026 |
| AIRASHI | 15 | trending down | Jul 13, 2026 |
| Overlord RAT | 15 | trending down | Jul 14, 2026 |
| ValleyRAT | 14 | trending up | Jul 13, 2026 |
| Nanocore RAT | 12 | trending down | Jul 14, 2026 |
| BADBOX | 10 | stable | Jul 11, 2026 |
| Havoc | 10 | stable | Jul 14, 2026 |
| Pikabot | 9 | stable | Jul 10, 2026 |
| RatonRAT | 9 | trending down | Jul 14, 2026 |
| ACR Stealer | 8 | trending down | Jul 11, 2026 |
| Evilginx | 8 | trending down | Jul 14, 2026 |
| NjRAT | 8 | trending down | Jul 13, 2026 |
| PureLogs Stealer | 8 | trending down | Jul 14, 2026 |
| Meterpreter | 7 | trending down | Jul 13, 2026 |
| Remus | 7 | trending down | Jul 13, 2026 |
| Socks5 Systemz | 7 | trending up | Jul 13, 2026 |
| RedLine Stealer | 6 | stable | Jul 14, 2026 |
| Agent Tesla | 5 | trending down | Jul 11, 2026 |
| KongTuke | 5 | trending down | Jul 14, 2026 |
| Warzone | 5 | trending down | Jul 14, 2026 |
| Amadey | 4 | trending up | Jul 14, 2026 |
| FAKEUPDATES | 4 | stable | Jul 11, 2026 |
| Gozi | 4 | stable | Jul 11, 2026 |
| Sliver | 4 | trending down | Jul 12, 2026 |
| GCleaner | 3 | trending down | Jul 12, 2026 |
| Hook | 3 | stable | Jul 12, 2026 |
| NetSupportManager RAT | 3 | trending down | Jul 14, 2026 |
| PureRAT | 3 | stable | Jul 9, 2026 |
| Triada | 3 | trending down | Jul 14, 2026 |
| AMOS | 2 | stable | Jul 14, 2026 |
| Azorult | 2 | stable | Jul 9, 2026 |
| BianLian | 2 | stable | Jul 11, 2026 |
| Brute Ratel C4 | 2 | stable | Jul 10, 2026 |
| Cameleon | 2 | stable | Jul 12, 2026 |
| ClearFake | 2 | stable | Jul 8, 2026 |
| Clipper | 2 | stable | Jul 13, 2026 |
| DarkComet | 2 | stable | Jul 14, 2026 |
| EtherRAT | 2 | stable | Jul 11, 2026 |
| HijackLoader | 2 | stable | Jul 13, 2026 |
| neshta | 2 | stable | Jul 10, 2026 |
| STRRAT | 2 | stable | Jul 8, 2026 |
| Venom RAT | 2 | stable | Jul 11, 2026 |
| AndroRAT | 1 | stable | Jul 14, 2026 |
| Bashlite | 1 | stable | Jul 14, 2026 |
| Berbew | 1 | stable | Jul 10, 2026 |
| Chaos | 1 | stable | Jul 14, 2026 |
| CountLoader | 1 | stable | Jul 9, 2026 |
| DarkGate | 1 | stable | Jul 11, 2026 |
| Dosia | 1 | stable | Jul 14, 2026 |
| Ghost RAT | 1 | stable | Jul 10, 2026 |
| GRUNT | 1 | stable | Jul 11, 2026 |
| Houdini | 1 | stable | Jul 10, 2026 |
| Kinsing | 1 | stable | Jul 13, 2026 |
| Loki Password Stealer (PWS) | 1 | stable | Jul 10, 2026 |
| N-W0rm | 1 | stable | Jul 10, 2026 |
| NightshadeC2 | 1 | stable | Jul 10, 2026 |
| Pay2Key | 1 | stable | Jul 11, 2026 |
| Pony | 1 | stable | Jul 11, 2026 |
| PoshC2 | 1 | stable | Jul 9, 2026 |
| PurpleFox | 1 | stable | Jul 10, 2026 |
| Raccoon | 1 | stable | Jul 14, 2026 |
| RMS | 1 | stable | Jul 10, 2026 |
| Satacom | 1 | stable | Jul 9, 2026 |
| SectopRAT | 1 | stable | Jul 11, 2026 |
| SmokeLoader | 1 | stable | Jul 11, 2026 |
| SnappyClient | 1 | stable | Jul 13, 2026 |
| Stealerium | 1 | stable | Jul 9, 2026 |
| Tsundere | 1 | stable | Jul 10, 2026 |
| Umbral | 1 | stable | Jul 8, 2026 |
| Vjw0rm | 1 | stable | Jul 10, 2026 |
| xmrig | 1 | stable | Jul 13, 2026 |
AsyncRAT 496 C2 · Jul 14, 2026 VShell 271 C2 · Jul 14, 2026 Quasar RAT 134 C2 · Jul 14, 2026 Remcos 83 C2 · Jul 14, 2026 Cobalt Strike 62 C2 · Jul 14, 2026 Aisuru 48 C2 · Jul 14, 2026 XWorm 41 C2 · Jul 14, 2026 Vidar 38 C2 · Jul 14, 2026 Mirai 33 C2 · Jul 14, 2026 AdaptixC2 31 C2 · Jul 14, 2026 DCRat 27 C2 · Jul 13, 2026 NonEuclid RAT 23 C2 · Jul 14, 2026 Kimwolf 20 C2 · Jul 13, 2026 Clickfix 16 C2 · Jul 14, 2026 StealC 16 C2 · Jul 13, 2026 AIRASHI 15 C2 · Jul 13, 2026 Overlord RAT 15 C2 · Jul 14, 2026 ValleyRAT 14 C2 · Jul 13, 2026 Nanocore RAT 12 C2 · Jul 14, 2026 BADBOX 10 C2 · Jul 11, 2026 Havoc 10 C2 · Jul 14, 2026 Pikabot 9 C2 · Jul 10, 2026 RatonRAT 9 C2 · Jul 14, 2026 ACR Stealer 8 C2 · Jul 11, 2026 Evilginx 8 C2 · Jul 14, 2026 NjRAT 8 C2 · Jul 13, 2026 PureLogs Stealer 8 C2 · Jul 14, 2026 Meterpreter 7 C2 · Jul 13, 2026 Remus 7 C2 · Jul 13, 2026 Socks5 Systemz 7 C2 · Jul 13, 2026 RedLine Stealer 6 C2 · Jul 14, 2026 Agent Tesla 5 C2 · Jul 11, 2026 KongTuke 5 C2 · Jul 14, 2026 Warzone 5 C2 · Jul 14, 2026 Amadey 4 C2 · Jul 14, 2026 FAKEUPDATES 4 C2 · Jul 11, 2026 Gozi 4 C2 · Jul 11, 2026 Sliver 4 C2 · Jul 12, 2026 GCleaner 3 C2 · Jul 12, 2026 Hook 3 C2 · Jul 12, 2026 NetSupportManager RAT 3 C2 · Jul 14, 2026 PureRAT 3 C2 · Jul 9, 2026 Triada 3 C2 · Jul 14, 2026 AMOS 2 C2 · Jul 14, 2026 Azorult 2 C2 · Jul 9, 2026 BianLian 2 C2 · Jul 11, 2026 Brute Ratel C4 2 C2 · Jul 10, 2026 Cameleon 2 C2 · Jul 12, 2026 ClearFake 2 C2 · Jul 8, 2026 Clipper 2 C2 · Jul 13, 2026 DarkComet 2 C2 · Jul 14, 2026 EtherRAT 2 C2 · Jul 11, 2026 HijackLoader 2 C2 · Jul 13, 2026 neshta 2 C2 · Jul 10, 2026 STRRAT 2 C2 · Jul 8, 2026 Venom RAT 2 C2 · Jul 11, 2026 AndroRAT 1 C2 · Jul 14, 2026 Bashlite 1 C2 · Jul 14, 2026 Berbew 1 C2 · Jul 10, 2026 Chaos 1 C2 · Jul 14, 2026 CountLoader 1 C2 · Jul 9, 2026 DarkGate 1 C2 · Jul 11, 2026 Dosia 1 C2 · Jul 14, 2026 Ghost RAT 1 C2 · Jul 10, 2026 GRUNT 1 C2 · Jul 11, 2026 Houdini 1 C2 · Jul 10, 2026 Kinsing 1 C2 · Jul 13, 2026 Loki Password Stealer (PWS) 1 C2 · Jul 10, 2026 N-W0rm 1 C2 · Jul 10, 2026 NightshadeC2 1 C2 · Jul 10, 2026 Pay2Key 1 C2 · Jul 11, 2026 Pony 1 C2 · Jul 11, 2026 PoshC2 1 C2 · Jul 9, 2026 PurpleFox 1 C2 · Jul 10, 2026 Raccoon 1 C2 · Jul 14, 2026 RMS 1 C2 · Jul 10, 2026 Satacom 1 C2 · Jul 9, 2026 SectopRAT 1 C2 · Jul 11, 2026 SmokeLoader 1 C2 · Jul 11, 2026 SnappyClient 1 C2 · Jul 13, 2026 Stealerium 1 C2 · Jul 9, 2026 Tsundere 1 C2 · Jul 10, 2026 Umbral 1 C2 · Jul 8, 2026 Vjw0rm 1 C2 · Jul 10, 2026 xmrig 1 C2 · Jul 13, 2026