a public collection of malicious code targeting macOS
โ ๏ธ This page contains links to live malware!
By downloading malware from this site, you waive all rights to claim any damages resulting from mishandling or self-infection.
๐ Specimens are password protected.
The password for all specimens is: infect3d
๐พ This collection is (also) hosted on GitHub.
You can also browse and download all samples directory from there: Malware Collection on GitHub.
๐ Interested in learning more about Mac malware?
Check out our (free) "The Art of Mac Malware" book(s): https://taomm.org/.
By downloading malware from this site, you waive all rights to claim any damages resulting from mishandling or self-infection.
๐ Specimens are password protected.
The password for all specimens is: infect3d
๐พ This collection is (also) hosted on GitHub.
You can also browse and download all samples directory from there: Malware Collection on GitHub.
๐ Interested in learning more about Mac malware?
Check out our (free) "The Art of Mac Malware" book(s): https://taomm.org/.
| A | ||||
| AdWind | backdoor | info | virus total |  |
| AoboKeylogger (Baoba) | keylogger | info | virus total | |
| AppleJeus | backdoor | info | virus total | |
| B | ||||
| BackTrack | keylogger | info | virus total | |
| BadBunny | worm (poc) | info | virus total | |
| BirdMiner (LoudMiner) | cryptominer | info | |
|
| BlackHole (Musminim) | backdoor | info | virus total | |
| Bundlore (Buca, CrossRider(?)) | adware | info | virus total | |
| C | ||||
| Calisto | backdoor | info | virus total | |
| CallMe | backdoor | info | virus total | |
| Careto (Mask) | backdoor | info | virus total | |
| CDDS (MacMa) | backdoor | info | virus total | |
| ChatZum (Okaz, Zako) | adware | info | virus total | |
| Clapzok | virus (poc) | info | virus total | |
| ClickAgent | adware | info | virus total | |
| CloudMensis | backdoor | info | virus total | |
| CoinMiner | cryptominer | info | virus total | |
| CoinThief | bitcoin stealer | info | virus total | |
| Coldroot | backdoor | info | virus total | |
| Conduit (Trovi, VSearch) | adware | info | virus total | |
| CookieMiner | cryptominer, backdoor | info | virus total | |
| Cosmac (iAdware, Macrocosm) | adware (poc) | info | virus total | |
| Covid | backdoor | info | virus total | |
| Cowhand | backdoor | info | virus total | |
| CpuMeaner | cryptominer | info | virus total | |
| CrateDepression | backdoor | info | virus total | |
| CreativeUpdate | cryptominer | info | virus total | |
| Crisis (Davinci, Morcut) | backdoor | info | virus total | |
| CrossRAT | backdoor | info | virus total | |
| D | ||||
| Dacls | backdoor | info | virus total | |
| DarthMiner | miner | info | virus total | |
| DazzleSpy | backdoor | info | virus total | |
| DevilRobber | spyware/miner | info | virus total | |
| Dockster | backdoor | info | virus total | |
| Dok | spyware (proxy) | info | virus total | |
| DoubleFantasy | backdoor | virus total | |
|
| Dummy | backdoor | info | virus total | |
| E | ||||
| Eleanor | backdoor | info | virus total | |
| ElectroRAT | cryto stealer | info | virus total | |
| ElectrumStealer | cryto stealer | info | virus total | |
| Elite Keylogger | keylogger | info | virus total | |
| EvilEgg | dropper | info | virus total | |
| EvilOSX | backdoor | info | virus total | |
| EvilQuest | backdoor | info | virus total | |
| eWatch | spyware | info | ||
| F | ||||
| FakeFileOpener | adware | info | virus total | |
| FairyTale | adware | info | virus total | |
| FileCoder | ransomware | info | virus total | |
| FileCoder (FindZip, Patcher) | ransomware | info | virus total | |
| FinSpy | backdoor | info | virus total | |
| FkCodec (Codecm, Vinstaller) | adware | info | virus total | |
| Flasfa (FlsplyDp) | backdoor | info | virus total | |
| FlashBack | backdoor | info | virus total | |
| FruitFly (Quimitchin) | backdoor | info | virus total | |
| G | ||||
| Genieo (InstallMac) | adware | info | virus total | |
| GetShell | backdoor | info | virus total | |
| Gimmick | backdoor | info | virus total | |
| GinX | ransomware | info | ||
| GMERA | backdoor | info | virus total | |
| Gopher | ransomware (poc) | info | virus total | |
| GoPhoto | adware/pup | info | virus total | |
| GravityRAT | backdroor | info | virus total | |
| GreenLambert | backdoor | info | virus total | |
| H | ||||
| HellRaiser (Brutal, HellRTS, PinHead) | backdoor | info | virus total | |
| HiddenLotus | backdoor | virus total | |
|
| Hovdy (AsTHT) | backdoor | info | virus total | |
| Hydromac | adware | info | virus total | |
| I | ||||
| IceFog (PrxlA) | backdoor | info | virus total | |
| Inqtana (Niqtana) | worm (poc) | info | virus total | |
| InstallCap | adware | info | virus total | |
| InstallCore (FlashImitator, IronCore) | adware | info | virus total | |
| IPStorm | botnet | info | virus total | |
| Insekt | backdoor | info | virus total | |
| iWorkServ (iServices, Krowi) | backdoor | info | virus total | |
| iWorm | backdoor | info | virus total | |
| J | ||||
| Jacksbot (jRAT) | backdoor | info | virus total | |
| Janicab | backdoor | info | virus total | |
| K | ||||
| KeRanger | ransomware | info | virus total | |
| KeyboardLoggerX | keylogger | info | ||
| Keyboard Spy Logger | keylogger | info | ||
| Keydnap | backdoor | info | virus total | |
| KeySteal | backdoor | info | virus total | |
| KitM (FileSteal, HackBack, Kitmos) | backdoor | info | virus total | |
| Komplex | backdoor | info | virus total | |
| KoobFace (Boonana) | worm | info | virus total | |
| L | ||||
| Lamadai (Olyx, PubSab, SabPub) | backdoor | info | virus total | |
| LamePyre | backdoor | info | virus total | |
| Lamzev (Malez) | backdoor | info | virus total | |
| LaoShu | backdoor | info | virus total | |
| Leverage (FlashyComposer) | backdoor | info | virus total | |
| LockBit | ransomware | info | virus total | |
| LoseLose | file destroyer (poc) | info | virus total | |
| M | ||||
| Mabouia | ransomware (poc) | info | virus total | |
| Macarena | virus (poc) | info | virus total | |
| MacDefender (MacProtector, MacSecurity) | adware | info | virus total | |
| MacDownloader | backdoor | info | virus total | |
| MacInstaller | adware | info | virus total | |
| MacKontrol (MacControl, Tibet) | backdoor | info | virus total | |
| MacRansom | ransomware | info | virus total | |
| MacKeeper | adware/pup | info | virus total | |
| MacSpy | backdoor | info | virus total | |
| MacSweeper | adware | info | virus total | |
| MacVX | adware | info | virus total | |
| MaMi | adware | info | virus total | |
| MineSteal | password stealer | info | virus total | |
| Mokes | backdoor | info | virus total | |
| Mughthesec (Safe Finder, Operator Mac) | adware | info | virus total | |
| N | ||||
| NukeSped | backdoor | info | virus total | |
| O | ||||
| OceanLotus | backdoor | info | virus total | |
| OOMP (Leap) | worm | info | virus total | |
| OpinionSpy (Premier Opinion) | adware/backdoor | info | virus total | |
| oRat | backdoor | info | virus total | |
| OSAMiner | cryptominer | info | virus total | |
| P | ||||
| PerfectKeylog (Blazing Keylogger) | keyloggger | info | virus total | |
| PintSized | backdoor | info | virus total | |
| PokerStealer (CorPref) | backdoor | info | virus total | |
| PPMiner | info | virus total | |
|
| PSides | info | virus total | |
|
| Proton (ParticleSmasher) | backdoor | info | virus total | |
| Puper (DNSChanger, Jahlav, RSPlug-F) | adware | info | virus total | |
| Pwnet | miner | info | virus total | |
| Pymafka | backdoor | info | virus total | |
| Q | ||||
| Qhost (HostMod) | adware | info | virus total | |
| R | ||||
| RealTimeSpy | backdoor | info | virus total | |
| Revir (Imuller) | backdoor | info | virus total | |
| Renepo (Opener) | worm | info | virus total | |
| rShell | backdoor | info | virus total | |
| Rubyilyn | rootkit (poc) | info | virus total | |
| S | ||||
| SentinelSneak | file stealer | info | |
|
| Shlayer | adware | info | virus total | |
| Siggen | backdoor | info | virus total | |
| SilverSparrow | adware | info | virus total | |
| SMSSend | adware | info | virus total | |
| Snake | backdoor | info | virus total | |
| SniperSpy | backdoor | info | virus total | |
| Spigot | adware | info | virus total | |
| SysJoker | backdoor | info | virus total | |
| Systemd (Demsty) | backdoor | info | virus total | |
| T | ||||
| TinyShell | backdoor | info | virus total | |
| Tored | bot (poc) | info | virus total | |
| Tsunami (Kaiten) | IRC bot | info | virus total | |
| V | ||||
| Ventir | backdoor | info | virus total | |
| VSearch (Pirrit) | adware | info | virus total | |
| W | ||||
| WatchCat | backdoor | info | virus total | |
| WeaponX | rootkit (poc) | info | virus total | |
| WildPressure | backdoor | info | virus total | |
| WindTail | backdoor | info | virus total | |
| WindTape | backdoor | |
||
| WireLurker (Machook) | backdoor | info | virus total | |
| Wirenet (NetWeirdRC) | backdoor | info | virus total | |
| X | ||||
| XAgent | backdoor | info | virus total | |
| Xamloader (WeDownload) | adware | info | virus total | |
| XcodeGhost | virus | info | |
|
| XcodeSpy | backdoor | info | virus total | |
| XCSSET | virus | info | virus total | |
| XLoader | backdoor | info | virus total | |
| XslCmd | backdoor | info | virus total | |
| Y | ||||
| Yontoo | adware | info | virus total | |
| Yort | backdoor | info | virus total | |
| Z | ||||
| ZuRu | backdoor | info | virus total | |