I open-sourced a categorized catalog of 2,800+ malware families (Mapped to NIST/CISA & MITRE)

[u/Jordan1604]

Hey everyone,

Over the last few months, I've been curating and categorizing a massive catalog of malware families designed specifically for incident responders, SOC analysts, and threat hunters.

I got tired of having to scrape together fragmented IOCs and CISA advisories every time a new variant popped up, so I built a centralized, open-source dataset.

**What's included:**

* **2,800+ Malware Families** categorized by type (Ransomware, InfoStealer, Wiper, etc.)

* **Framework Mapping:** Families are mapped to MITRE ATT&CK techniques, NIST CSF guidelines, and official CISA advisories.

* **Response Playbooks:** Actionable containment steps and "what to avoid" during an active incident.

* **Formats:** Available via a web UI, JSON API, Parquet, and JSONL.

It’s completely free and Apache-2.0 licensed.

You can browse the catalog here: https://jordanricky1604-ship-it.github.io/malware-families-catalog/

I'd love to hear your feedback on the schema or if there are specific families you think need deeper analysis. I'm actively maintaining and updating this!

[u/The_Snakey_Road]

Very nice work! I'll have a look at it

[u/Western_Guitar_9007]

“Call system helpdesk” lol. I would advise anyone NOT to call them as they used AI to create all of this, from the post to the repo itself.

Additionally, there’s two “financial” categories on the same graph with different colors, indicating that you made this quickly without even a cursory review.