ZScaler

Manus AI accounted for 15.6% of attributed AI site builders, Blackbox AI accounted for 14.3%, and Anything AI accounted for 9.8% of attributed builders.

Phishing activity declined by approximately 20% year-over-year in both 2024 and 2025.

Services industry phishing hits surged 65.5% year-over-year from 330.9 million to 547.7 million hits.

The United States accounted for 54% of all IoT attack activity.

Adware accounted for 69% of mobile threat cases, overtaking the Joker malware family, which dropped to 23% of cases.

239 malicious applications were identified on the Google Play Store, collectively downloaded over 42 million times.

95.2% of phishing activity is delivered over encrypted channels.

Manufacturing and Transportation sectors accounted for over 40% of total IoT malware attacks, with each sector representing 20.2% of all observed attacks.

There was a 67% year-over-year increase in Android malware transactions.

Roughly 40% of blocked IoT transactions are linked to the Mirai malware family.

India accounted for 26% of all mobile attack activity.

India experienced a 38% increase in mobile threat attacks compared to the previous year.

The energy sector experienced a 387% increase in attacks compared to the previous year.