This graph covers several major & emerging threats typically used to gain initial access to victim systems, including remote access Trojans (RATs), loaders, and botnets/worms. Adversaries usually use access gained via these malware to ingress other, usually more impactful threats, such as ransomware or cryptominers, either directly or after loading other "malware delivery" threats, such as other loaders or Trojans. A map of the TTPs associated with many of these threats can be found in the matrix hosted in Tidal's free Community Edition app here (click the labels in the ribbon at the top for further details and sourcing): https://app.tidalcyber.com/share/43836024-a194-4ac7-9659-b51e88632e7f

Download the full underlying graph analysis dataset, including sourcing, here