CyberThreatWiki — The Independent Cyber Threat Encyclopedia

CyberThreatWiki is an independent, neutral encyclopedia of the cyber threat landscape. It covers malware families and ransomware strains, threat actor groups, attack techniques, vulnerabilities and weakness classes, security controls and defensive technology, notable breaches and campaigns, frameworks and regulation, and the tools used to attack and defend systems.

Articles are written for readers with no prior security background and explain concepts from first principles. Where a campaign or intrusion is attributed to a group, the article names the organisation making that assessment rather than asserting it as settled fact. The site publishes no exploit code, no operational attack instructions, and no indicators of compromise. It has no affiliation with any security vendor, agency or organisation it describes.

Explore by Topic

Malware1004 articlesMalware families, ransomware strains, loaders, and malicious toolkits Threat Actors116 articlesAPT groups, cybercrime crews, and hacktivist collectives Techniques105 articlesAdversary tactics, techniques, and attack patterns Incidents88 articlesNotable breaches, intrusion campaigns, and historical events Vulnerabilities87 articlesNamed vulnerabilities, weakness classes, and exploit categories Tools28 articlesSecurity software, analysis utilities, and testing frameworks Defenses19 articlesSecurity controls, mitigations, and defensive technologies Standards & Regulation9 articlesFrameworks, legislation, certifications, and compliance regimes

View all categories →

Recent Articles

Neconyd
**Neconyd** is a malware family known for its capabilities to steal sensitive information from infected systems. It primarily targets Windows operatin
NAPLISTENER
**NAPLISTENER** is a malware family known for its ability to intercept and manipulate network traffic. It primarily targets Windows operating systems
MoonPeak
MoonPeak is a sophisticated malware family known for its advanced capabilities and stealthy operations. As of October 2023, cybersecurity researchers
NailaoLocker
**NailaoLocker** is a type of ransomware that encrypts files on infected systems, demanding a ransom payment in exchange for a decryption key. Ransomw
NanoLocker
NanoLocker is a type of ransomware, a form of malicious software that encrypts a victim's files and demands payment for the decryption key. As of Octo
MZRevenge
MZRevenge is a type of malware that has been identified as a threat to computer systems. It is known for its ability to infiltrate systems and cause d
MysterySnail
**MysterySnail** is a remote access trojan (RAT) identified in cyber espionage campaigns targeting various sectors. The malware is known for its abili
MuddyC2Go
**MuddyC2Go** is a malware tool used for command and control (C2) operations in cyber attacks. It facilitates communication between an attacker and co
MPKBot
**MPKBot** is a type of malware that has been identified as a threat to various sectors, primarily targeting financial institutions. It is known for i
Moriya
**Moriya** is a sophisticated malware framework that has been used in cyber espionage campaigns. It is designed to provide attackers with stealthy acc

Encyclopedia Stats

1223 articles published