I open-sourced a categorized catalog of 2,800+ malware families (Mapped to NIST/CISA & MITRE)
This is an open-source, categorized catalog of over 2,800 malware families mapped to frameworks such as NIST CSF, CISA advisories, and MITRE ATT&CK. It is designed to aid incident responders, SOC analysts, and threat hunters by providing a centralized dataset with actionable containment steps and response playbooks. The catalog is freely available under an Apache-2.0 license and accessible via multiple formats including web UI and JSON API. It is not a vulnerability or active threat but a resource for cybersecurity professionals.
AI Analysis
Technical Summary
The catalog compiles 2,899 real-world malware families from the EMBER 2018 dataset, categorized into 33 types such as ransomware, info stealers, and wipers. Each family is mapped to established cybersecurity frameworks (MITRE ATT&CK, NIST CSF, CISA advisories) and includes response playbooks with containment guidance. The dataset is openly licensed and maintained, providing a centralized resource to streamline threat intelligence and incident response efforts. No direct exploit or vulnerability is described.
Potential Impact
There is no direct security impact or vulnerability associated with this catalog. It serves as a reference and knowledge base to improve detection, analysis, and response to malware threats. It does not introduce risk or exploitation vectors itself.
Mitigation Recommendations
No mitigation or patching is required as this is an informational resource, not a vulnerability or active threat. Security teams can leverage this catalog to enhance their malware detection and response capabilities.
I open-sourced a categorized catalog of 2,800+ malware families (Mapped to NIST/CISA & MITRE)
Description
This is an open-source, categorized catalog of over 2,800 malware families mapped to frameworks such as NIST CSF, CISA advisories, and MITRE ATT&CK. It is designed to aid incident responders, SOC analysts, and threat hunters by providing a centralized dataset with actionable containment steps and response playbooks. The catalog is freely available under an Apache-2.0 license and accessible via multiple formats including web UI and JSON API. It is not a vulnerability or active threat but a resource for cybersecurity professionals.
Reddit Discussion
Hey everyone,
Over the last few months, I've been curating and categorizing a massive catalog of malware families designed specifically for incident responders, SOC analysts, and threat hunters.
I got tired of having to scrape together fragmented IOCs and CISA advisories every time a new variant popped up, so I built a centralized, open-source dataset.
**What's included:**
* **2,800+ Malware Families** categorized by type (Ransomware, InfoStealer, Wiper, etc.)
* **Framework Mapping:** Families are mapped to MITRE ATT&CK techniques, NIST CSF guidelines, and official CISA advisories.
* **Response Playbooks:** Actionable containment steps and "what to avoid" during an active incident.
* **Formats:** Available via a web UI, JSON API, Parquet, and JSONL.
It’s completely free and Apache-2.0 licensed.
You can browse the catalog here: https://jordanricky1604-ship-it.github.io/malware-families-catalog/
I'd love to hear your feedback on the schema or if there are specific families you think need deeper analysis. I'm actively maintaining and updating this!
Links cited in this discussion
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The catalog compiles 2,899 real-world malware families from the EMBER 2018 dataset, categorized into 33 types such as ransomware, info stealers, and wipers. Each family is mapped to established cybersecurity frameworks (MITRE ATT&CK, NIST CSF, CISA advisories) and includes response playbooks with containment guidance. The dataset is openly licensed and maintained, providing a centralized resource to streamline threat intelligence and incident response efforts. No direct exploit or vulnerability is described.
Potential Impact
There is no direct security impact or vulnerability associated with this catalog. It serves as a reference and knowledge base to improve detection, analysis, and response to malware threats. It does not introduce risk or exploitation vectors itself.
Defensive Guidance
No mitigation or patching is required as this is an informational resource, not a vulnerability or active threat. Security teams can leverage this catalog to enhance their malware detection and response capabilities.
Technical Details
- Source Type
- Subreddit
- cybersecurity
- Reddit Score
- 0
- Discussion Level
- minimal
- Content Source
- reddit_link_post
- Post Type
- link
- Domain
- null
- Newsworthiness Assessment
- {"score":41,"reasons":["external_link","newsworthy_keywords:rce,malware","established_author","recent_news"],"isNewsworthy":true,"foundNewsworthy":["rce","malware"],"foundNonNewsworthy":[]}
- Has External Source
- true
- Trusted Domain
- false
Threat ID: 6a7da9cbbf8831d5391b64f2
Added to database: 08/13/2026, 11:26:03 UTC
Last enriched: 08/13/2026, 11:26:11 UTC
Last updated: 08/13/2026, 17:11:06 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.