A new reference has been added to family SystemBC: https://github.com/vc0RExor/Malware-Threat-Reports/blob/main/The%20Swiss%20Knife%20-%20SystemBC%20%7C%20Coroxy/The%20Swiss%20Knife-SystemBC_EN.pdf

Channel
Malpedia Update Feed
@malpedia
On this record: Topic · Growth · Engagement · Posts · Cite this entry
1,560subscribers
-32 since we began measuring on 7 August 2026
Risers and fallers across the register · movement among entries of 1,000–3,162.
Register entry
| Telegram ID | -1001380507150 |
|---|---|
| Type | Channel |
| Username | @malpedia |
| Created | Between 1 April 2018 and 31 August 2021 — estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 7 August 2026 |
| Last confirmed live | 29 October 2026 |
| Measurements held | 18 |
| Confirmed unchanged | 1 time, most recently 29 October 2026 |
| On Telegram | t.me/malpedia |
Topic
Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 17 September 2026 and assigned it the closest of 31 fixed categories, at 84% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and the other topics.
Growth
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 29 Oct 2026, 07:30 | 1,560 | -2 |
| 26 Oct 2026, 06:21 | 1,562 | -1 |
| 23 Oct 2026, 14:06 | 1,563 | -2 |
| 14 Oct 2026, 19:59 | 1,565 | -1 |
| 11 Oct 2026, 21:16 | 1,566 | -5 |
| 5 Oct 2026, 13:55 | 1,571 | +1 |
| 28 Sept 2026, 01:55 | 1,570 | -3 |
| 18 Sept 2026, 16:59 | 1,573 | -2 |
| 14 Sept 2026, 10:38 | 1,575 | -4 |
| 10 Sept 2026, 10:21 | 1,579 | -1 |
| 1 Sept 2026, 13:18 | 1,580 | -3 |
| 27 Aug 2026, 06:34 | 1,583 | -1 |
| 24 Aug 2026, 15:49 | 1,584 | -3 |
| 21 Aug 2026, 08:16 | 1,587 | +2 |
| 14 Aug 2026, 21:07 | 1,585 | -3 |
| 11 Aug 2026, 05:25 | 1,588 | -4 |
| 7 Aug 2026, 21:17 | 1,592 | no change |
| 7 Aug 2026, 12:32 | 1,592 | first reading |
Engagement
20 posts held, back to 12 December 2023 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 page of Telegram’s post history, 20 posts per page.
Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 20 posts for this entry, the most recent from 14 December 2023. An engagement rate over an empty window would be a number about nothing.
Recent posts
A new reference has been added to family PlugX: https://www.splunk.com/en_us/blog/security/unmasking-the-enigma-a-historical-dive-into-the-world-of-plugx-malware.html
A new reference has been added to family GootLoader: https://github.com/struppigel/hedgehog-tools/tree/main/gootloader
A new reference has been added to family Akira: https://www.intrinsec.com/akira_ransomware/
POOLRAT * A new reference has been added to family POOLRAT: https://www.welivesecurity.com/2023/04/20/linux-malware-strengthens-links-lazarus-3cx-supply-chain-attack
A new family has been added: KV
Meduza Stealer * A new reference has been added to family Meduza Stealer: https://cert.gov.ua/article/6276652 Remcos * A new reference has been added to family Remcos: https://cert.gov.ua/article/6276652
Rhysida * A new reference has been added to family Rhysida: https://www.shadowstackre.com/analysis/rhysida Rhysida * A new reference has been added to family Rhysida: https://www.shadowstackre.com/analysis/rhysida
FAKEUPDATES * A new reference has been added to family FAKEUPDATES: https://blog.checkpoint.com/research/november-2023s-most-wanted-malware-new-asyncrat-campaign-discovered-while-fakeupdates-re-entered-the-top-ten-after-brief-hiatus/ AsyncRAT * A new reference has been added to family AsyncRAT: https://blog.checkpoint.com/research/november-2023s-most-wanted-malware-new-asyncrat-campaign-discovered-while-fakeupdates-r…
A new family has been added: Vetta Loader
A new family has been added: PureLogs Stealer
A new family has been added: Krasue RAT
Showing the 12 most recent of 20 posts we hold for @malpedia. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
Cite this entry
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 29 October 2026 — this entry's latest reading, not the date you are reading this.
“Malpedia Update Feed” (@malpedia), 1,560 subscribers as measured 29 October 2026. Telegram Register, tgregister.com/channel/malpedia.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.