Spain
Spain Infostealer Threat Report — January 2026
01/01/2026 – 01/31/2026
Threat summary
Key figures from the month's threat activity.
Overview
Most common malware family: PUREV4 (29.1% of infections). Sector with the most employee account leaks: Retail and e-commerce.
Ransomware victims in Spain5,945
infected devices · from 10 families
Report periodJan 1, 2026 - Jan 31, 2026
Risk score
50
- Infected devices
- 5,945
- Android devices
- 3,058
- Domains
- 46,011
- Employee accounts
- 1,403
- Customer accounts
- 339,649
- Families
- 10
Top 10 malware families
infections- 1PUREV41,727
- 2VIDAR1,211
- 3LUMMAC1,105
- 4STEALC1,013
- 5REDLINE368
- 6UNKNOWN182
- 7KATZ STEALER64
- 8MACSYNC STEALER29
- 9SHUB STEALER27
- 10ATOMIC MAC STEALER24
The full list is in the PDF reportDownload report
Top 10 antivirus
infected devices- 1Windows Defender867
- 2McAfee2
Breakdown of leaks
Breakdown by sector, file type and critical system.
Employee accounts by sector
organizationsrecordsRansomware victimsemployee accounts- 1Retail and e-commerce10organizations39.1Krecords–Ransomware victims131employee accounts
- 2Education38organizations11.0Krecords–Ransomware victims120employee accounts
- 3Technology22organizations78.3Krecords6Ransomware victims45employee accounts
- 4Government12organizations11.3Krecords1Ransomware victims42employee accounts
- 5Nonprofit11organizations4.1Krecords–Ransomware victims40employee accounts
- 6Telecommunications9organizations6.3Krecords–Ransomware victims37employee accounts
- 7Manufacturing and industry6organizations3.9Krecords2Ransomware victims20employee accounts
- 8Travel and hospitality7organizations7.0Krecords3Ransomware victims18employee accounts
- 9Professional services2organizations1.2Krecords2Ransomware victims12employee accounts
- 10Entertainment and lifestyle3organizations3.2Krecords–Ransomware victims6employee accounts
The full list is in the PDF reportDownload report
Report contents
Sections and pages of the full report.
Contents
Download the reportPreparing contents
Other reports
From the Essential plan
Infostealer Detection
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.