US Threat Landscape Alert: 30 Active Malware Families Ranked by Real Sandbox Data

This ANY.RUN Malware Trends Tracker report ranks the top 30 active malware families impacting US organizations based on real sandbox submission volume, calling out a surge in phishing-as-a-service (AiTM and device-code OAuth token theft) that undermines MFA, the persistent circulation of commodity RATs and stealers, and the ongoing presence of legacy threats like Emotet and WannaCry; it urges SOCs to treat loaders, beacons, and session-token theft as early ransomware indicators and to adopt interactive sandboxing plus threat intelligence feeds for rapid detection and blocking.