I open-sourced a categorized catalog of 2,800+ malware families (Mapped to NIST/CISA & MITRE)
Source Reddit Cybersecurity
Discussion
This is an open-source, categorized catalog of over 2,800 malware families mapped to frameworks such as NIST CSF, CISA advisories, and MITRE ATT&CK. It is designed to aid incident responders, SOC analysts, and threat hunters by providing a centralized dataset with actionable containment steps and response playbooks. The catalog is freely available under an Apache-2.0 license and accessible via multiple formats including web UI and JSON API. It is not a vulnerability or active threat but a resource for cybersecurity professionals.
r/cybersecurity (opens in a new tab)u/Jordan16040 points0 comments
Hey everyone,
Over the last few months, I've been curating and categorizing a massive catalog of malware families designed specifically for incident responders, SOC analysts, and threat hunters.
I got tired of having to scrape together fragmented IOCs and CISA advisories every time a new variant popped up, so I built a centralized, open-source dataset.
**What's included:**
* **2,800+ Malware Families** categorized by type (Ransomware, InfoStealer, Wiper, etc.)
* **Framework Mapping:** Families are mapped to MITRE ATT&CK techniques, NIST CSF guidelines, and official CISA advisories.
* **Response Playbooks:** Actionable containment steps and "what to avoid" during an active incident.
* **Formats:** Available via a web UI, JSON API, Parquet, and JSONL.
It’s completely free and Apache-2.0 licensed.
You can browse the catalog here: https://jordanricky1604-ship-it.github.io/malware-families-catalog/
I'd love to hear your feedback on the schema or if there are specific families you think need deeper analysis. I'm actively maintaining and updating this!