Disguised as legitimate mobile applications, targets Android users outside of the official Google Play Store. Once installed, it allows remote control of the device and can exfiltrate sensitive personal data, including photos and location history. 9. AsyncRAT Top 10 Malware Q1 2025 - CIS Center for Internet Security
Sold primarily to law enforcement and intelligence agencies, is a sophisticated surveillance suite that works across Windows, macOS, and mobile platforms. It can turn on microphones for real-time recording and transmit images without the user's knowledge. 6. Kimwolf Botnet The Top 10 Spyware and Adware Threats
is one of the most common "commodity" infostealers, designed to harvest form submissions and browser credentials. It is prized by attackers for its stealth and its ability to feed large-scale credential-resale markets on the dark web. 8. PhoneSpy AsyncRAT Top 10 Malware Q1 2025 - CIS
Surging in 2026, has infected over two million devices, including Android TV boxes and digital photo frames. It functions as both spyware and a residential proxy, selling the bandwidth of infected home devices to other cybercriminals. 7. Formbook Kimwolf Botnet is one of the most common
In 2026, the landscape of spyware and adware has evolved from simple browser hijackers into sophisticated, multi-platform tools that often blend legitimate system features with malicious intent. These threats range from "mercenary" software used by governments to aggressive, AI-powered ad-delivery systems. 1. Pegasus (NSO Group)
Uncovered in early 2026, DarkSword is an advanced found on compromised Ukrainian government and news websites. It operates as a "watering hole," silently siphoning iCloud Keychain passwords, iMessages, and cryptocurrency wallet data from unpatched devices. 3. Agent Tesla
A veteran "Remote Access Trojan" (RAT) and infostealer, specializes in keylogging and stealing credentials from browsers and clipboards. It is frequently delivered via invoice-themed phishing emails targeting small-to-mid-sized businesses. 4. AMOS (Atomic macOS Stealer)