Indonesia
Indonesia Infostealer Threat Report — March 2026
03/01/2026 – 03/31/2026
Threat summary
Key figures from the month's threat activity.
Overview
Most common malware family: PUREV4 (50.5% of infections). Sector with the most employee account leaks: Government. Leaked accounts rose by 54.6% compared with the previous month.
Ransomware victims in Indonesia26,413
infected devices · from 10 families
Report periodMar 1, 2026 - Mar 31, 2026
Risk score
77+36vs previous month
- Infected devices
- 26,413
- Android devices
- 16,613
- Domains
- 157,258
- Employee accounts
- 4,653
- Customer accounts
- 924,740
- Families
- 10
Top 10 malware families
infections- 1PUREV413,335
- 2VIDAR6,988
- 3STEALC1,699
- 4ARKEI1,250
- 5REDLINE911
- 6LUMMAC656
- 7REMUS234
- 8SHAPESHIFTER87
- 9MACSYNC STEALER78
- 10SHUB STEALER53
The full list is in the PDF reportDownload report
Top 10 antivirus
infected devices- 1Windows Defender6,223
- 2Reason Cybersecurity21
- 3Norton Security3
Breakdown of leaks
Breakdown by sector, file type and critical system.
Employee accounts by sector
organizationsrecordsRansomware victimsemployee accounts- 1Government133organizations153.4Krecords–Ransomware victims1,340employee accounts
- 2Education239organizations59.8Krecords–Ransomware victims785employee accounts
- 3Technology79organizations174.8Krecords–Ransomware victims233employee accounts
- 4Travel and hospitality7organizations4.8Krecords–Ransomware victims152employee accounts
- 5Finance15organizations22.8Krecords–Ransomware victims100employee accounts
- 6Manufacturing and industry22organizations5.4Krecords1Ransomware victims80employee accounts
- 7Telecommunications15organizations5.9Krecords–Ransomware victims75employee accounts
- 8Nonprofit11organizations5.4Krecords–Ransomware victims55employee accounts
- 9Gaming and betting11organizations35.3Krecords–Ransomware victims54employee accounts
- 10Retail and e-commerce16organizations32.9Krecords–Ransomware victims45employee accounts
The full list is in the PDF reportDownload report
Report contents
Sections and pages of the full report.
Contents
Download the reportPreparing contents
Other reports
From the Essential plan
Infostealer Detection
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.