Doctor Web’s virus activity review for 2025

Doctor Web’s 2025 annual threat overview reports a rise in ad-displaying trojans, increased Android banking trojan activity, targeted APT attacks (notably by Scaly Wolf and Cavalry Werewolf), firmware-infected Android devices, wide use of ClickFix social-engineering, and continued distribution of malicious apps via Google Play; the report provides malware family detections, ransomware trends (fewer user decrypt requests), examples of exploits and steganography-based delivery, and numerous fraud/phishing site campaigns.