In the third quarter of 2025, the frequency of malware notifications rose by 38%, indicating an escalating cyber threat landscape. Notably, SocGholish remained the most prevalent malware, accounting for 26% of detections. It functions as a downloader, primarily written in JavaScript, and is disseminated through malicious websites that impersonate legitimate browser updates. Infections from SocGholish can result in further exploitation, including the deployment of remote access tools (RATs) like NetSupport and AsyncRAT. The Multi-State Information Sharing and Analysis Center (MS-ISAC) identifies three primary initial infection vectors for the top malware: Dropped, Malspam, and Malvertisement, with some malware exhibiting multiple infection methods depending on their context.