The MalwareTypeVocab is the default STIX vocabulary for expressing types of malware instances.
Note that this vocabulary is under development. Feedback is appreciated and should be sent to the STIX discussion list.
Item | Description |
---|---|
Automated Transfer Scripts | |
Adware | |
Dialer | |
Bot | |
Bot - Credential Theft | |
Bot - DDoS | |
Bot - Loader | |
Bot - Spam | |
DoS / DDoS | |
DoS / DDoS - Participatory | |
DoS / DDoS - Script | |
DoS / DDoS - Stress Test Tools | |
Exploit Kits | |
POS / ATM Malware | |
Ransomware | |
Remote Access Trojan | |
Rogue Antivirus | |
Rootkit |
Field Name | Type | Description |
---|---|---|
@vocab_nameoptional | string |
The vocab_name field specifies the name of the controlled vocabulary. |
@vocab_referenceoptional | anyURI |
The vocab_reference field specifies the URI to the location of where the controlled vocabulary is defined, e.g., in an externally located XML schema file. |