Malware Activity: Key Statistics
Quarter over Quarter comparison:
April 1, 2021 - June 30, 2021
Each reporting period, we analyze URLs, domain names, and IP addresses reported for serving up or distributing malware. We use these and other metadata – domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators – to report key statistics for each reporting period.
We analyzed 1,087,810 malware reports collected during the April - June 2021 period, an 82% increase over the previous period.
82% INCREASE IN MALWARE REPORTS COLLECTED FROM FEEDS
65% INCREASE IN MALWARE THAT TARGETED INTERNET OF THINGS (IOT) DEVICES
11% INCREASE IN MALWARE THAT TARGETED USER-ATTENDED DEVICES
45% INCREASE IN IPV4 ADDRESSES REPORTED FOR SERVING MALWARE
A comparison of key statistics from appears in the table below.
| Measurement | January 2021 - March 2021 | April 2021 - June 2021 | Change in Measurement |
|---|---|---|---|
| Total number of malware reports collected from feeds (per quarter) | 598,223 | 1,087,810 | 489,587 |
| Total number of malware records produced from malware reports | 388,252 | 881,186 | 492,934 |
| Endpoint malware (targets user-attended devices) | 131,040 | 145,905 | 14,885 |
| Internet of Things (IoT) malware (targets sensors, wearables, appliances...) | 107,216 | 284,639 | 177,243 |
| Uncategorized malware (Verified as malware but not classified) | 149,996 | 450,642 | 300,646 |
| Unique domain names reported for serving up malware | 19,950 | 18,961 | 989 |
| Top-level Domains (TLDs) where we observed malware hosting | 257 | 259 | 2 |
| Registrars that had gTLD domains under management reported for serving malware | 273 | 225 | 48 |
| Hosting Networks (ASNs) where we observed malware hosting or distribution | 2,102 | 1,898 | 204 |
| Unique IPv4 addresses reported as serving or distributing malware | 81,282 | 117,847 | 36,565 |
Quarter over Quarter Comparisons of:
Key Statistics