CyberThreatWiki — The Independent Cyber Threat Encyclopedia

CyberThreatWiki is an independent, neutral encyclopedia of the cyber threat landscape. It covers malware families and ransomware strains, threat actor groups, attack techniques, vulnerabilities and weakness classes, security controls and defensive technology, notable breaches and campaigns, frameworks and regulation, and the tools used to attack and defend systems.

Articles are written for readers with no prior security background and explain concepts from first principles. Where a campaign or intrusion is attributed to a group, the article names the organisation making that assessment rather than asserting it as settled fact. The site publishes no exploit code, no operational attack instructions, and no indicators of compromise. It has no affiliation with any security vendor, agency or organisation it describes.

Explore by Topic

Malware1195 articlesMalware families, ransomware strains, loaders, and malicious toolkits Threat Actors146 articlesAPT groups, cybercrime crews, and hacktivist collectives Incidents118 articlesNotable breaches, intrusion campaigns, and historical events Techniques113 articlesAdversary tactics, techniques, and attack patterns Vulnerabilities95 articlesNamed vulnerabilities, weakness classes, and exploit categories Tools29 articlesSecurity software, analysis utilities, and testing frameworks Defenses20 articlesSecurity controls, mitigations, and defensive technologies Standards & Regulation9 articlesFrameworks, legislation, certifications, and compliance regimes

View all categories →

Recent Articles

SamoRAT
**SamoRAT** is a remote access trojan (RAT) designed to provide unauthorized access and control over infected systems. It is used by threat actors to
Sakula RAT
Sakula RAT is a type of Remote Access Trojan (RAT) that has been used in various cyber espionage campaigns. Remote Access Trojans are a form of malwar
Saint Bot
**Saint Bot** Saint Bot is a malware downloader that emerged in early 2021. It is designed to deliver additional malicious payloads onto compromised
Saitama Backdoor
**Saitama Backdoor** The **Saitama Backdoor** is a type of malicious software used by threat actors to gain unauthorized access to computer systems.
Rustock
**Rustock** was a notorious botnet primarily active from 2006 to 2011. It was known for sending large volumes of spam emails and was one of the most p
Rtpos
**Rtpos** is a type of malware specifically designed to target point-of-sale (POS) systems. POS systems are used by businesses to process transactions
Rustonotto
**Rustonotto** is a type of malware that has been identified as a significant threat in the cybersecurity landscape. As of October 2023, Rustonotto ha
RURansom
RURansom is a type of ransomware, a form of malicious software that encrypts files on a victim's computer, demanding payment for decryption. Unlike ty
RoyalCli
**RoyalCli** is a type of malware that has been identified as a threat to computer systems. It is known for its ability to execute commands remotely o
Rovnix
**Rovnix** is a sophisticated piece of malware primarily known for its ability to execute stealthy attacks on Windows operating systems. It is a type

Encyclopedia Stats

1447 articles published