W32.Ramnit

W32.Ramnit steals files from infected computers and targets Microsoft Windows software, according to the security firm Symantec. First discovered in 2010, it ends up distributed through data sticks, among other methods, and can give an attacker remote control over a system when there is a connection to the Internet.

Conficker

Conficker has infected millions of Windows computers worldwide since it first came to light in 2008. It is able to spread through networks and by copying itself onto removable data drives.

Colossus

Ransomware called Colossus affects machines running Microsoft Windows operating systems.

BlackMatter

BlackMatter is a ransomware-as-a-service group founded as a successor to several ransomware groups, including DarkSide, which appeared to attack the Colonial Pipeline, and REvil, which went silent for months after the Kaseya attack flooded hundreds of companies with ransomware.