Infostealer Threat Report — August 2026
08/01/2026 – 08/31/2026
Threat summary
Key figures from the month's threat activity.
- Ransomware victims1,165organizations listed on leak sites22.4% increasefrom the previous monthView details
- Most active ransomware groupQilin164 organizations listedView details
- Exploited vulnerabilities31added to the CISA Known Exploited Vulnerabilities catalogView details
- Publicly disclosed breaches30.2Maccounts affected in 11 breachesView details
Country distribution
350,291
infected devices · in 218 countries
Report periodAug 1, 2026 - Aug 31, 2026
Top five share: 47%
Risk score
38-18vs previous month
- Infected devices
- 350,291
- Android devices
- 164,010
- Countries
- 218
- Domains
- 1,997,282
- Employee accounts
- 75,804
- Customer accounts
- 13,943,345
Top 10 malware families
infectionsTop 10 antivirus
infected devices- 1Windows Defender30,836
- 2Reason Cybersecurity592
- 3Kaspersky154
- 4Malwarebytes94
- 5Avast62
- 6ESET Security28
- 7Avast Antivirus24
- 8Panda Dome24
- 9360 Total Security23
- 10Norton 360 for Gamers21
Top 10 domains
- 1550,353
- 2337,035
- 3273,071
- 4262,100
- 5147,765
- 6147,682
- 7100,157
- 887,104
- 982,998
- 1082,819
Breakdown of leaks
Breakdown by sector, file type and critical system.
Employee accounts by sector
organizationsrecordsRansomware victimsemployee accounts- 1Education2.7Korganizations675.1Krecords–Ransomware victims10,801employee accounts
- 2Technology1.2Korganizations3.5Mrecords156Ransomware victims7,186employee accounts
- 3Government769organizations1.0Mrecords–Ransomware victims3,862employee accounts
- 4Telecommunications226organizations154.7Krecords–Ransomware victims2,624employee accounts
- 5Retail and e-commerce317organizations987.6Krecords76Ransomware victims991employee accounts
- 6Finance239organizations619.9Krecords66Ransomware victims894employee accounts
- 7Nonprofit138organizations117.1Krecords–Ransomware victims864employee accounts
- 8Healthcare168organizations77.8Krecords118Ransomware victims744employee accounts
- 9Media118organizations628.1Krecords–Ransomware victims692employee accounts
- 10Manufacturing and industry276organizations95.6Krecords185Ransomware victims690employee accounts
Report contents
Sections and pages of the full report.
Contents
Download the reportPreparing contents
Other reports
From the Essential plan
Infostealer Detection
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.