IT threat evolution in Q3 2025. Non-mobile statistics

In Q3 2025, Kaspersky solutions blocked more than 389 million attacks that originated with various online resources, with Web Anti-Virus triggering 51,886,619 unique URLs. In the same period, File Anti-Virus blocked more than 21 million malicious and potentially unwanted objects, and 2,200 new ransomware variants were detected. Nearly 85,000 users experienced ransomware attacks, and 15% of all ransomware victims whose data was published on data leak sites were victims of Qilin.

The report also notes that more than 254,000 users were targeted by miners. The IoT section shows shifts in the threat landscape, including changes in the share of IoT attacks delivered to honeypots and in the distribution of botnets such as Mirai variants and Gafgyt; overall, IoT threats remain a significant component of the quarterly activity, according to Securelist.