malware.html

---
layout: default
title: Malware Database
---

<div class="malware-index">
  <section class="hero">
    <h1>🦠 Malware Database</h1>
    <p class="hero-subtitle">A cross-reference database of malware and tools used by threat actors. Track which actors use which malware and discover related threats.</p>
    <div class="quick-stats">
      <div class="stat">
        <span class="stat-number" id="malware-count">-</span>
        <span class="stat-label">Malware Families</span>
      </div>
    </div>
  </section>

  <!-- Filters -->
  <section class="quick-filters">
    <h2>Quick Filters</h2>
    <div class="filter-chips">
      <div class="filter-group">
        <label>Search:</label>
        <input type="text" id="malware-search" placeholder="Search malware...">
      </div>
      <button id="apply-filters-btn">Search</button>
      <button id="clear-filters-btn" class="secondary">Clear</button>
    </div>
  </section>

  <!-- Malware List -->
  <section class="malware-section">
    <p id="malware-api-error" class="api-load-error" hidden role="alert"></p>
    <div class="malware-grid" id="malware-grid">
      <!-- Populated via JS -->
    </div>
  </section>
</div>

<script>
  // Load malware index from generated data (canonical URL: /api/malware-index.json)
  var API_MALWARE_INDEX = '{{ "/api/malware-index.json" | relative_url }}';
  var API_FACETS = '{{ "/api/facets.json" | relative_url }}';

  Promise.all([
    fetch(API_MALWARE_INDEX).then(function (r) {
      if (!r.ok) throw new Error('Malware index HTTP ' + r.status);
      return r.json();
    }),
    fetch(API_FACETS).then(function (r) {
      if (!r.ok) throw new Error('Facets HTTP ' + r.status);
      return r.json();
    })
  ]).then(function (results) {
    var data = results[0];
    var malware = data.malware || [];
    document.getElementById('malware-count').textContent = malware.length;
    renderMalware(malware);
    setupFilters(malware);
  }).catch(function (err) {
    var el = document.getElementById('malware-api-error');
    if (el) {
      el.hidden = false;
      el.textContent = 'Could not load malware data from the API. Try refreshing the page or run ruby scripts/generate-indexes.rb if you are developing locally. (' + (err && err.message ? err.message : 'error') + ')';
    }
    document.getElementById('malware-count').textContent = '?';
  });

  function renderMalware(list) {
    const grid = document.getElementById('malware-grid');
    grid.innerHTML = list.map(m => `
      <div class="malware-card">
        <h3><a href="${m.url}">${esc(m.name)}</a></h3>
        <div class="card-meta">
          ${m.category ? `<span class="category">${esc(m.category)}</span>` : ''}
        </div>
        <p class="card-desc">Used by <strong>${m.actor_count}</strong> threat actor${m.actor_count !== 1 ? 's' : ''}</p>
        <a href="${m.url}" class="card-link">View details →</a>
      </div>
    `).join('');
  }

  function setupFilters(list) {
    document.getElementById('apply-filters-btn').onclick = () => {
      const term = document.getElementById('malware-search').value.toLowerCase();
      const filtered = list.filter(m => 
        !term || m.name.toLowerCase().includes(term)
      );
      renderMalware(filtered);
    };
    
    document.getElementById('clear-filters-btn').onclick = () => {
      document.getElementById('malware-search').value = '';
      renderMalware(list);
    };
    
    document.getElementById('malware-search').addEventListener('keypress', e => {
      if (e.key === 'Enter') {
        document.getElementById('apply-filters-btn').click();
      }
    });
  }

  function esc(s) {
    return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
  }
</script>