Kaspersky Detects 500,000 Malicious Files Daily in 2025, Cyber Threats Surge Globally
Online threats impacted 27% of users, while 33% experienced on-device threats, including malware distributed via removable media or embedded in complex installers.
Kaspersky ’s 2025 Security Bulletin reveals that its detection systems identified an average of 500,000 malicious files per day this year, representing a 7% increase from 2024. Certain threats surged significantly, including a 59% rise in password stealers, a 51% increase in spyware, and a 6% growth in backdoors globally.
Windows remains the primary target, with 48% of users affected by various threats, while 29% of Mac users faced attacks. Online threats impacted 27% of users, while 33% experienced on-device threats, including malware distributed via removable media or embedded in complex installers.
Regional trends show substantial growth in specific malware types. APAC saw a 132% increase in password stealers, Europe experienced a 50% rise in backdoors and a 64% jump in spyware, while Africa and LATAM also reported significant increases in password stealers and spyware. The Middle East reported 26% more password stealers and 37% more spyware, and the CIS region recorded a 67% rise in password stealers and 68% increase in spyware.
Kaspersky highlighted emerging threats such as the re-emergence of the Hacking Team and its commercial spyware Dante, used in the ForumTroll APT campaign, exploiting zero-day vulnerabilities in Chrome and Firefox. Supply chain attacks, including the first widespread NPM worm Shai-Hulud, further underscore the evolving cyber threat landscape.
To stay protected, Kaspersky recommends that individuals avoid untrusted applications and links, enable two-factor authentication, use strong and unique passwords, keep systems updated, and employ robust security solutions. Organizations are advised to maintain updated software, limit public exposure of remote services, deploy advanced security solutions like Kaspersky Next, leverage the latest threat intelligence, and ensure regular, isolated backups of corporate data.

