Malware in 2025 spread far beyond Windows PCs

Malware in 2025 spread far beyond Windows PCs, with notable developments on Android and macOS alongside cross‑platform threats that can target Windows, macOS, Linux, mobile and IoT devices. Android banking Trojans grew more sophisticated in 2025, often disguising themselves as fake apps to harvest credentials, with examples like Herodotus that mimic human typing to evade detection, and adware that pushes intrusive ads through free apps.

On macOS, campaigns such as ClickFix expanded, distributing tools like AMOS stealers and the Rhadamanthys infostealer via techniques that trick users into running malicious commands. Across platforms, attackers increasingly use languages like Rust and Go to broaden their malware’s reach, while Malware-as-a-Service models rise on underground markets, enabling rent or purchase of offensive toolchains.

The trends emphasise a shift in focus toward mobile and macOS alongside traditional Windows protection, underlining the need for comprehensive security that covers phones, tablets and other connected devices as well as laptops. According to Malwarebytes, this multi‑platform evolution signals the strategic direction for 2026.