Malware

TsarBot, CopyBara, and Hook collectively targeted more than 60% of global banking and fintech apps.

Across cloud providers, Azure draws 43.5% of observed malware samples, Google Cloud Platform draws 33.2%, and Amazon Web Services draws 23.2%.

BoaLoader malware is a factor in nearly 20% of incidents observed in the calendar year.

41% of internal audit leaders are concerned about the use of AI to insert malicious code.

12% of organizations detected employee exposure to malware via GitHub each month in 2025.

In 2025, malicious attachments were present in 18% of phishing attacks.

89% of schools experienced at least one cyber incident in the past year, primarily phishing, unauthorized access, and malware.

Malware email attacks surged by 131% year-over-year in 2025

Malware and ransomware accounted for 51% of all cyber insurance claims in 2024, up from 32% in 2023.

Roughly 40% of blocked IoT transactions are linked to the Mirai malware family.

There was a 67% year-over-year increase in Android malware transactions.

44% of Gen Z households reported malware infections.

44% of Gen Z parents report their child or family experiencing malware or a virus from downloads.

35% of companies have experienced autonomous and mutating malware attacks.

Vulnerability exploitation led to malware deployment as a follow-up activity in 68% of cases.

Email remained the top vector for delivering malware, accounting for 61% of threats caught by HP Sure Click in Q2 2025. This was a 1 percentage point drop compared to Q1 2025.

In Q2 2025, 13% of malicious emails (phishing, malware, etc.) were not blocked by the email gateway security system. This is 1 percentage point higher than in Q1 2025.

1 in 14 files, initially deemed 'safe' by legacy systems, were proven to be malicious

There has been a 127% rise in malware complexity.

Malware was identified as the second most trafficked threat category.