Doctor Web’s Q2 2026 virus activity review

Doctor Web's Q2 2026 threat report documents an overall increase in detected threats and unique malicious files, highlighting prevalent adware and trojans, widespread Android banking trojans and subscription/fraud apps (including 2.6M+ installs of Joker/Subscription families), discovery of JobStealer (macOS/Windows infostealer targeting browser crypto wallets and other sensitive data), the Android.MagicAd.1 trojan that bypasses OS restrictions to show background ads, multiple email-based downloaders and Office exploits, ongoing encoder (ransomware) activity with listed top encoder families, and numerous phishing/fraud campaigns targeting messenger users, banking customers, and consumers with fake marketplaces and government/payment scams.