25/02/2026
15:44

Report 2026 Malware campaigns


The 2026 summary report of malware campaigns analyzed during the year 2025 by the C.R.A.M. of TG Soft.

Report 2026 Malware campaigns


The 2026 Malware Campaigns Report, compiled by TG Soft's C.R.A.M., summarizes all MalSpam campaigns sent via email that were analyzed during 2025.

The year 2025 has reconfirmed the trend of spreading Info/Password Stealers through malspam campaigns distributed both via ordinary electronic mail (PEO) and in some cases, although limited, via certified electronic mail (PEC).

The most popular families are FormBookAgentTesla, and Remcos. These three families topped the global campaigns, and the same families, though in different order, also topped the Italian-targeted campaigns (written in Italian).


Download the full report in PDF to see in detail the progress of the campaigns during the year 2025 and to discover more information such as which were the most used themes and languages.
 




To stay up to date with TG Soft news, we invite you to subscribe to the newsletter

C.R.A.M. of TG Soft.
 
Any information published on our site may be used and published on other websites, blogs, forums, facebook and/or in any other form both in paper and electronic form as long as the source is always and in any case cited explicitly “Source: CRAM by TG Soft www.tgsoft.it” with a clickable link to the original information and / or web page from which textual content, ideas and / or images have been extrapolated.
It will be appreciated in case of use of the information of C.R.A.M. by TG Soft www.tgsoft.it in the report of summary articles the following acknowledgment/thanks “Thanks to Anti-Malware Research Center C.R.A.M. by TG Soft of which we point out the direct link to the original information: [direct clickable link]”

Vir.IT eXplorer PRO is certified by the biggest international organisation: