Malware Threat Landscape 2026

Real-time malware statistics from MalwareBazaar and ThreatFox. Updated daily.

20
Families Tracked
8,827
Total Samples
11765
C2 Servers
20,592
IOCs Collected

Category Breakdown

Infostealers

56%
6 families 4,959 samples
Agent Tesla, Formbook, Lumma Stealer, Raccoon Stealer, RedLine Stealer, Vidar

Botnets

26%
1 family 2,300 samples
Mirai

Remote Access Trojans

16%
4 families 1,413 samples
AsyncRAT, Cobalt Strike, QuasarRAT, Remcos RAT

Keyloggers

2%
1 family 152 samples
Snake Keylogger

Loaders

0%
1 family 3 samples
Emotet

Ransomware

0%
7 families 0 samples
Akira, Black Basta, INC Ransom, LockBit, Medusa, Qilin, RansomHub

Top 5 Most Active Families

Current Trends

Methodology

Data is sourced from MalwareBazaar (abuse.ch) for sample submissions and ThreatFox (abuse.ch) for IOC and C2 infrastructure data. Sample counts represent new unique submissions per day. Trend calculations compare the latest day's sample count against the 7-day moving average. All data is refreshed daily via automated pipelines.