Malware Trends Report 2025: New Security Risks for Businesses in 2026

ANY.RUN's Malware Trends Report 2025 reviews telemetry from 6.8M sandbox sessions (1.4M malicious, 3.8B IOCs) and finds dramatic growth in stealers and RATs (3x), widespread use of MFA-bypassing phishing kits (Tycoon2FA, EvilProxy), and a shift toward stealth and trust abuse—most notably T1553.004 (install root certificate); the report recommends behavioral detection, continuous monitoring, and integration of fresh threat intelligence for 2026.