Brazil
Brazil Infostealer Threat Report — July 2026
07/01/2026 – 07/31/2026
Threat summary
Key figures from the month's threat activity.
Overview
Most common malware family: VIDAR (33.7% of infections). Sector with the most employee account leaks: Education. Leaked accounts rose by 44.7% compared with the previous month.
Ransomware victims in Brazil19,169
infected devices · from 10 families
Report periodJul 1, 2026 - Jul 31, 2026
Risk score
72+24vs previous month
- Infected devices
- 19,169
- Android devices
- 8,713
- Domains
- 133,634
- Employee accounts
- 4,264
- Customer accounts
- 1,353,363
- Families
- 10
Top 10 malware families
infections- 1VIDAR6,464
- 2REMUS3,386
- 3PUREV42,908
- 4REDLINE2,709
- 5STEALC2,161
- 6ACREED575
- 7META409
- 8LUMMAC124
- 9SHAPESHIFTER45
- 10ELYSIUM STEALER13
The full list is in the PDF reportDownload report
Top 10 antivirus
infected devices- 1Windows Defender3,779
- 2Reason Cybersecurity105
- 3Kaspersky47
- 4Panda Dome30
- 5Malwarebytes22
Breakdown of leaks
Breakdown by sector, file type and critical system.
Employee accounts by sector
organizationsrecordsRansomware victimsemployee accounts- 1Education68organizations57.6Krecords–Ransomware victims330employee accounts
- 2Government96organizations90.9Krecords1Ransomware victims307employee accounts
- 3Technology78organizations306.3Krecords4Ransomware victims262employee accounts
- 4Manufacturing and industry39organizations11.0Krecords4Ransomware victims108employee accounts
- 5Media6organizations57.1Krecords–Ransomware victims99employee accounts
- 6Professional services11organizations3.8Krecords4Ransomware victims66employee accounts
- 7Telecommunications15organizations18.0Krecords–Ransomware victims48employee accounts
- 8Finance10organizations57.7Krecords–Ransomware victims44employee accounts
- 9Nonprofit12organizations18.2Krecords–Ransomware victims41employee accounts
- 10Retail and e-commerce23organizations121.9Krecords6Ransomware victims40employee accounts
The full list is in the PDF reportDownload report
Report contents
Sections and pages of the full report.
Contents
Download the reportPreparing contents
Other reports
From the Essential plan
Infostealer Detection
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.