Get Q2 2025 Report
Based on real data from 15,000+ global SOC teams.
- Top malware types, families, and APTs
- Changes in threat landscape since Q1 2025
- What SOC teams need to focus on
What’s Inside the Report
Over 15,000 companies across finance, healthcare, government, and other industries analyze suspicious files and URLs inside ANY.RUN’s Interactive Sandbox to ensure early threat detection. The data from these analyses becomes freely available through Threat Intelligence Lookup, helping other organizations enrich their investigations with fresh threat context, accelerate response, and strengthen proactive defense.
Each quarter, we dive into the last three months of this data to spotlight key trends that shape strategic planning of numerous organizations for the next quarter. ANY.RUN’s Malware Trends Report provides a comprehensive breakdown of the cyber threat landscape. The report saves organizations hours of research with actionable insights to boost security resilience.
Key threats covered in the report:
- Malware families and types
- Advanced Persistent Threats (APTs)
- Phishing kits
- Tactics, Techniques, and Procedures (TTPs)
- Additional cybersecurity trends
Previous Reports
ANY.RUN publishes quarterly malware trends reports along with the final annual report. Below are links to reports from 2024 and 2025:
- Q1, 2025 Malware Trends Report
- 2024 Malware Trends Report
- Q4, 2024 Malware Trends Report
- Q3, 2024 Malware Trends Report
- Q2, 2024 Malware Trends Report
- Q1, 2024 Malware Trends Report
To see reports for 2023, please click here.
Learn all about the most recent malware trends to keep track of growing threats and stay alert to protect your organization.
About ANY.RUN
ANY.RUN’s services are used by SOC teams and companies across different industries, including finance, manufacturing, healthcare, and technology.
The Interactive Sandbox helps businesses ensure fast and accurate analysis of threats targeting Windows, Linux, & Android systems. It provides capabilities for hands-on and in-depth investigations of complex malware and phishing scenarios.
Threat Intelligence Lookup enables organizations to enrich their knowledge on active cyber attacks, while TI Feeds allow businesses to expand threat coverage and detection.