Malware Threat Landscape 2026

Real-time malware statistics from MalwareBazaar and ThreatFox. Updated daily.

20
Families Tracked
10,414
Total Samples
12921
C2 Servers
23,335
IOCs Collected

Category Breakdown

Infostealers

57%
6 families 5,971 samples
Agent Tesla, Formbook, Lumma Stealer, Raccoon Stealer, RedLine Stealer, Vidar

Botnets

25%
1 family 2,600 samples
Mirai

Remote Access Trojans

16%
4 families 1,661 samples
AsyncRAT, Cobalt Strike, QuasarRAT, Remcos RAT

Keyloggers

2%
1 family 179 samples
Snake Keylogger

Loaders

0%
1 family 3 samples
Emotet

Ransomware

0%
7 families 0 samples
Akira, Black Basta, INC Ransom, LockBit, Medusa, Qilin, RansomHub

Top 5 Most Active Families

Current Trends

Methodology

Data is sourced from MalwareBazaar (abuse.ch) for sample submissions and ThreatFox (abuse.ch) for IOC and C2 infrastructure data. Sample counts represent new unique submissions per day. Trend calculations compare the latest day's sample count against the 7-day moving average. All data is refreshed daily via automated pipelines.