Malware

DNS-layer threat blocking service with real-time threat intelligence feeds

Real-time C2 infrastructure detection and disruption threat intelligence feed

Cloud-native secure web gateway for web traffic inspection and threat protection

A threat intelligence service providing actionable IoCs and security data feeds to help organizations detect, block, and respond to cyber threats.

Cloudflare Cloud Email Security is a cloud-based email protection service that safeguards organizations against phishing, malware, spam, and other email-borne threats through integrated threat detection and prevention capabilities.

An AI-powered email security platform that provides multi-layered protection against phishing, malware, and other email-based threats through various deployment options.

A GitHub repository for fuzzing and testing file formats

CrowdFMS is a CrowdStrike framework that automates malware sample collection from VirusTotal using YARA rule-based notifications and the Private API system.

Collection of cybersecurity conference videos recorded by Cooper (@Ministraitor)

YaraHunter scans container images, running Docker containers, and filesystems using YARA rules to detect malware indicators and signs of compromise.

Malware Patrol offers a range of threat intelligence solutions, including enterprise data feeds, DNS firewall, phishing threat intelligence, and small business protection.

A repository of YARA rules for identifying and classifying malware through pattern-based detection.

A dataset release policy for the Android Malware Genome Project, requiring authentication and justification for access to the dataset.

A free DNS recursive service that blocks malicious host names and protects user privacy.

A Yara ruleset designed to detect PHP shells and other webserver malware for malware analysis and threat detection.

A community-driven public malware repository providing access to malware samples, tools, and resources for the cybersecurity community.

Open-source initiative providing malicious and benign datasets to expedite data analysis and threat research.

A collection of Android Applications with malware analysis results

Largest open collection of Android malware samples, with 298 samples and contributions welcome.

A simple framework for extracting actionable data from Android malware

Advanced Endpoint Protection is a complete endpoint protection platform that provides advanced threat protection against ransomware, data breaches, and malware.

UDcide is an Android malware analysis tool that detects and removes specific malicious behaviors from malware samples while preserving the binary for investigation purposes.

A free threat intelligence feed and banlist feed of known malicious IP addresses for public use only.