Software
41 drainer kits, malware families, and tooling observed in on-chain attacks.
Software (41)
- OAK-S01 Inferno Drainer — drainer-kit
- OAK-S02 Angel Drainer — drainer-kit
- OAK-S03 Pink Drainer — drainer-kit
- OAK-S04 Monkey Drainer — drainer-kit
- OAK-S05 Venom Drainer — drainer-kit
- OAK-S06 Vanilla Drainer — drainer-kit
- OAK-S07 Chick Drainer — drainer-kit
- OAK-S08 TraderTraitor — malware
- OAK-S09 AppleJeus — malware
- OAK-S10 Manuscrypt — malware
- OAK-S11 3CX VoIP Client Trojan — malware
- OAK-S12 JADESNOW — malware
- OAK-S13 RedLine Stealer — infostealer
- OAK-S14 Lumma Stealer — infostealer
- OAK-S15 AsyncRAT — malware (open-source remote access trojan)
- OAK-S16 Profanity — tool / vanity-gen (open-source Ethereum vanity-address generator)
- OAK-S17 jaredfromsubway.eth — mev-bot
- OAK-S18 Pump.fun-style Bundlers — tool / mev-bot (class)
- OAK-S19 KandyKorn — malware
- OAK-S20 RustBucket — malware
- OAK-S21 SwiftLoader — malware
- OAK-S22 ObjCShellz — malware
- OAK-S23 LockBit ransomware — ransomware
- OAK-S24 BlackCat / ALPHV ransomware — ransomware
- OAK-S25 Maui ransomware — ransomware
- OAK-S26 Conti ransomware — ransomware
- OAK-S27 Black Basta ransomware — ransomware
- OAK-S28 Royal / BlackSuit ransomware — ransomware
- OAK-S29 BeaverTail — malware (npm-package supply-chain malware / first-stage JavaScript loader and infostealer)
- OAK-S30 InvisibleFerret — malware (Python second-stage backdoor / credential-and-wallet-data infostealer)
- OAK-S31 TigerRAT — malware (Windows backdoor / persistent-access remote-access-trojan)
- OAK-S32 AppleSeed — malware (Windows backdoor / persistent-access remote-access-trojan with HWP-document-borne delivery surface)
- OAK-S33 Akira ransomware — ransomware
- OAK-S34 RansomHub ransomware — ransomware
- OAK-S35 BlackByte ransomware — ransomware
- OAK-S36 Karakurt extortion-only kit — tool / extortion-only operation tooling
- OAK-S37 Cobalt Strike — tool / commodity post-exploitation framework (legitimate red-team product, widely abused)
- OAK-S38 IcedID + Pikabot loaders — malware / commodity loader (initial-access broker class)
- OAK-S39 DanaBot — malware / banking trojan + commodity loader
- OAK-S40 Qakbot / Pinkslipbot / QBot — malware / banking trojan + commodity loader
- OAK-S41 RemotePE — malware (Windows fileless remote-access-trojan)