7 Types of Malware You’ll See More of in the Next 12 Months

Cybercrime is evolving—and fast. As security measures improve, so do the tactics of malicious actors. The next 12 months are likely to bring a fresh wave of sophisticated malware targeting individuals, businesses, and public sector organisations across the UK.

Whether you’re an IT pro, a small business owner, or just trying to keep your digital life secure, here are 7 types of malware you’re likely to hear a lot more about in the coming year.

1. AI-Powered Phishing Malware

The days of badly written scam emails are fading. New malware is leveraging artificial intelligence to craft believable, targeted phishing messages that bypass traditional spam filters. These AI-enhanced attacks can scrape personal data from social media and tailor messages that seem genuinely trustworthy.

Watch out for: Convincing emails or texts that appear to come from your bank, employer, or even family members.

2. Mobile Banking Trojans

Mobile malware is on the rise, especially on Android devices. Expect a sharp uptick in banking trojans that mimic legitimate banking apps, capturing login details and stealing funds without you even noticing.

Watch out for: Apps asking for unusual permissions or downloaded from third-party stores. Stick to Google Play and Apple App Store when possible.

3. Ransomware-as-a-Service (RaaS)

Ransomware isn’t new, but its delivery model is changing. Ransomware-as-a-Service platforms are making it easier than ever for low-level cybercriminals to launch devastating attacks without needing technical skills.

Watch out for: Encrypted files, locked devices, and ransom demands demanding payment in cryptocurrency. Businesses should bolster backup and recovery strategies now.

4. Fileless Malware

Fileless attacks don’t install any software. Instead, they exploit tools already built into your system (like PowerShell or WMI) to carry out malicious activity, making them incredibly hard to detect.

Watch out for: Suspicious system behaviour without any new files being downloaded. Endpoint detection and response (EDR) tools are key here.

5. IoT Malware

As smart homes and connected devices become mainstream, so too does Internet of Things (IoT) malware. From smart fridges to security cameras, anything connected to your Wi-Fi can become a target.

Watch out for: Unusual network traffic, sluggish internet speeds, or devices behaving oddly. Change default passwords and update firmware regularly.

6. Info-Stealers

A growing trend is malware designed specifically to harvest sensitive information, from passwords and browsing history to saved credit card details and cryptocurrency wallets.

Watch out for: Browser extensions or “free” tools that request excessive access. Regularly audit your installed software and extensions.

7. Deepfake Malware

Deepfake tech is no longer just a gimmick—it’s being used in malware campaigns to impersonate CEOs, HR staff, or even family members via video or audio, tricking users into transferring money or giving away confidential information.

Watch out for: Unexpected video calls or voice notes asking for urgent help or confidential details. Verify identities through a second channel before responding.

Final Thoughts

Cyber threats are becoming more personalised, more intelligent, and more dangerous. Whether you’re at home or running a business, being proactive is essential. That means strong passwords, regular updates, multi-factor authentication, and keeping a healthy dose of scepticism when online.

If you’re unsure whether something’s legitimate—it probably isn’t.

Stay safe out there.