International Threats: How Malware Campaigns Vary Across Non-English Languages

Executive summary: This Cofense Intelligence report analyzes phishing campaigns (May 2023–May 2025) that bypass secure email gateways to deliver a range of malware across five non‑English languages (Spanish, Italian, Portuguese, German, French). It highlights language-specific trends—such as the dominance of RATs in Spanish and Italian campaigns, prevalence of banking Trojans in Portuguese campaigns targeting Latin America, frequent multi-stage and loader-based deliveries, and abuse of legitimate URLs and services—emphasizing the need for multilingual defenses and targeted user training.