Malware Threat Landscape 2026

Real-time malware statistics from MalwareBazaar and ThreatFox. Updated daily.

20
Families Tracked
6,329
Total Samples
9992
C2 Servers
16,321
IOCs Collected

Category Breakdown

Infostealers

54%
6 families 3,433 samples
Agent Tesla, Formbook, Lumma Stealer, Raccoon Stealer, RedLine Stealer, Vidar

Botnets

25%
1 family 1,600 samples
Mirai

Remote Access Trojans

18%
4 families 1,163 samples
AsyncRAT, Cobalt Strike, QuasarRAT, Remcos RAT

Keyloggers

2%
1 family 133 samples
Snake Keylogger

Ransomware

0%
7 families 0 samples
Akira, Black Basta, INC Ransom, LockBit, Medusa, Qilin, RansomHub

Loaders

0%
1 family 0 samples
Emotet

Top 5 Most Active Families

Current Trends

Methodology

Data is sourced from MalwareBazaar (abuse.ch) for sample submissions and ThreatFox (abuse.ch) for IOC and C2 infrastructure data. Sample counts represent new unique submissions per day. Trend calculations compare the latest day's sample count against the 7-day moving average. All data is refreshed daily via automated pipelines.