Malware Activity: Key Statistics
Quarter over Quarter comparison:
July 1, 2021 - 30, 2021
Each reporting period, we analyze URLs, domain names, and IP addresses reported for serving up or distributing malware. We use these and other metadata – domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators – to report key statistics for each reporting period.
We analyzed 583,821 malware reports collected during the April - June 2021 period, a decrease of 503,989 reports (46%) over the previous period.
90% INCREASE IN UNIQUE DOMAINS REPORTED FOR SERVING MALWARE
34% DECREASE IN INTERNET OF THINGS (IOT) MALWARE
11% DECREASE IN ENDPOINT MALWARE
17% DECREASE IN IPV4 ADDRESSES REPORTED FOR SERVING MALWARE
A comparison of key statistics from appears in the table below.
| Measurement | April 2021 - June 2021 | July 2021 - September 2021 | Change in Measurement |
|---|---|---|---|
| Total number of malware reports collected from feeds (per quarter) | 1,087,810 | 583,821 | 503,989 |
| Total number of malware records produced from malware reports | 881,186 | 435,759 | 445,427 |
| Endpoint malware (targets user-attended devices) | 145,905 | 129,403 | 16,502 |
| Internet of Things (IoT) malware (targets sensors, wearables, appliances...) | 284,639 | 187,632 | 97,007 |
| Uncategorized malware (Verified as malware but not classified) | 450,642 | 118,724 | 331,918 |
| Unique domain names reported for serving up malware | 18,961 | 36,075 | 17,114 |
| Top-level Domains (TLDs) where we observed malware hosting | 259 | 214 | 45 |
| Registrars that had gTLD domains under management reported for serving malware | 225 | 180 | 45 |
| Hosting Networks (ASNs) where we observed malware hosting or distribution | 1,898 | 1,792 | 106 |
| Unique IPv4 addresses reported as serving or distributing malware | 117,847 | 98,295 | 19,552 |
Quarter over Quarter Comparisons of:
Key Statistics