Malwarebytes has released its 2025 State of Malware report, which reveals that AI has also captured the attention of threat agents and will become a key tool in future malware attacks.
The AI implementation that has gained a wide audience is generative AI, which can create content based on a user’s inquiry. For example, Apple Intelligence tools such as the Image Playground app or Writing Tools create content based on input the user provides. According to Malwarebytes, generative AI has not had a significant impact on malware.
However, the next iteration of AI is what experts call agentic AI, which can act autonomously to solve complex, multi-tiered problems. According to Malwarebytes, “Big game ransomware requires a lot of human labor,” and a lot of that labor can be addressed with agentic AI by threat agents. “Agentic AI could be used to scale up the number and speed of attacks,” according to the report. Agentic AI can also be used to defend against malware attacks through autonomous agents that can proactively check for vulnerabilities, monitor systems, and ensure that security patches are put into place.
Malwarebytes recommends that organizations “operate their security as efficiently as possible” to protect against attacks, which includes active monitoring of security consoles and acting on alerts immediately. Automated tools can be used to install security patches quickly and efficiently.
Malwarebyte’s report is targeted at IT professionals and the “big game” attacks the report covers involve corporations. The report also states that 2024 was the worst year ever for known ransomware attacks, which rose 13 percent. The U.S. saw a majority of the reported attacks, and two-thirds of the attacks were targeted at the manufacturing sector.
macOS Stealers
The Malwarebytes report also includes information on the increase in macOS Stealers, malware that is designed to find information such as authentication cookies, credit card numbers, passwords, and more. Atomic Stealer, malware that emerged in 2023, continues to be updated by its creators and has been used several times in different attacks. Other malware that uses Atomic Stealer as its base have been created, as well.
The easiest way to protect yourself as an individual user from malware is to avoid downloading software from repositories such as GitHub and other download sites. Apple has vetted software in the Mac App Store and is the safest way to get apps. If you prefer not to patronize the Mac App Store, then buy software directly from the developer and their website. If you insist on using cracked software, you will always risk malware exposure.
Apple releases security patches through OS updates, so installing them as soon as possible is important. Macworld has several guides to help, including a guide on whether or not you need antivirus software, a list of Mac viruses, malware, and trojans, and a comparison of Mac security software.
Author: Roman Loyola, Senior Editor, Macworld
Roman is a Macworld Senior Editor with over 30 years of experience covering the tech industry, focusing on the Mac and other products in the Apple ecosystem. He is also the host of the Macworld Podcast. His career started at MacUser, where he received Apple certification as a repair technician (when Apple did that kind of thing). He's also worked for MacAddict, MacLife, and TechTV.