United States of America
United States of America Infostealer Threat Report — October 2026
10/01/2026 – 10/31/2026
Threat summary
Key figures from the month's threat activity.
Overview
Most common malware family: VIDAR (30.7% of infections). Sector with the most employee account leaks: Education. Leaked accounts fell by 48% compared with the previous month.
Ransomware victims in United States of America10,950
infected devices · from 10 families
Report periodOct 1, 2026 - Oct 31, 2026
Risk score
26-18vs previous month
- Infected devices
- 10,950
- Android devices
- 3,370
- Domains
- 97,699
- Employee accounts
- 2,906
- Customer accounts
- 786,355
- Families
- 10
Top 10 malware families
infections- 1VIDAR3,358
- 2ACREED964
- 3REMUS457
- 4LUMMAC317
- 5REDLINE294
- 6STEALC160
- 7AURA STEALER60
- 8SHAPESHIFTER59
- 9ELYSIUM STEALER50
- 10GHOSTBUSTERS STEALER27
The full list is in the PDF reportDownload report
Top 10 antivirus
infected devices- 1Windows Defender762
- 2Reason Cybersecurity13
- 3Malwarebytes13
Breakdown of leaks
Breakdown by sector, file type and critical system.
Employee accounts by sector
organizationsrecordsRansomware victimsemployee accounts- 1Education275organizations37.7Krecords26Ransomware victims734employee accounts
- 2Technology63organizations207.9Krecords37Ransomware victims183employee accounts
- 3Telecommunications17organizations9.5Krecords–Ransomware victims96employee accounts
- 4Government27organizations29.1Krecords15Ransomware victims77employee accounts
- 5Retail and e-commerce20organizations61.0Krecords25Ransomware victims52employee accounts
- 6Logistics and transport5organizations6.1Krecords14Ransomware victims51employee accounts
- 7Finance9organizations54.5Krecords19Ransomware victims45employee accounts
- 8Nonprofit9organizations6.9Krecords–Ransomware victims23employee accounts
- 9Manufacturing and industry14organizations4.9Krecords58Ransomware victims23employee accounts
- 10Gaming and betting9organizations42.1Krecords–Ransomware victims20employee accounts
The full list is in the PDF reportDownload report
Report contents
Sections and pages of the full report.
Contents
Download the reportPreparing contents
Other reports
From the Essential plan
Infostealer Detection
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.