NordVPN, a leading provider of cybersecurity solutions, has released its latest findings on online threats from the second quarter of 2025. The expert team analysed aggregated data from the NordVPN Threat Protection Pro feature to identify the types of threats users most commonly encounter online.

The number of blocked malware threats increased by 6.4% compared to Q1, totalling 95,406 intercepted malicious files. The APC virus leads the list of the most common malicious software. Malware detection reached its peak in May, when 1.2 billion threats were identified and blocked.

In contrast, trackers blocked declined slightly (-6.2%). Nevertheless, with up to 58 billion blocked activities in April, tracking remained the most frequently detected online threat in Q2.

"Our data shows that online threats are steadily increasing, not only in number but also in complexity. Today, users face a rapidly evolving digital threat landscape. Cybercriminals deliberately exploit users' trust in well-known brands and their everyday online habits to gain access to sensitive data as unnoticed as possible," says Marijus Briedis, CTO of NordVPN.

Key findings from the report:

APC was the most frequently detected malware in Q2, with a total of 95,406 intercepted files.

.exe files remain the main carriers of malware with 181,008 threats, followed by .zip (27,531) and .dll (21,447).

Google is the most impersonated brand with over 200K malicious websites.

Other frequently faked brands include Yahoo!, Telegram, Steam, and Amazon.

The highest malware prevalence is found on the video hosting platforms, streaming services, and content delivery networks.

Brand impersonation threat remains high

Impersonation of well-known brands remains a widespread tactic among cybercriminals. This increasingly affects internet users in Ireland as well. Notably, Google is the most impersonated brand with over 200K malicious websites.

Yahoo!, Telegram, Steam, and Amazon are also regularly imitated. Through convincingly fake phishing websites or manipulated downloads, fraudsters attempt to gain access to sensitive credentials such as passwords or payment information. For users in Ireland, this means that a single click on a fake site can have severe consequences.

Malware attacks as a global problem

While no region is safe from cyber threats, some countries recorded particularly high numbers of blocked attacks in the second quarter of 2025. The US leads the way by a wide margin with 280 million incidents, followed by Canada with 256 million, the UK with 103 million, and Australia with 42 million.

Nigeria was targeted with 38 million malicious files, and Israel with 30 million. The Netherlands recorded over 71 million malware attacks in Q2 2025, making it the second most targeted country in Europe.

Increased vigilance needed in everyday digital life

NordVPN's insights show that online threats are continuing to rise both in frequency and sophistication. Whether through malware, intrusive ads, or targeted brand impersonations, users face increasingly complex cyber risks. Services like Threat Protection Pro can help detect and fend off such dangers early. However, user vigilance remains a crucial factor in effectively countering online threats.

"Only those who are aware of the risks and can recognise cyber dangers can effectively defend themselves against them," says Marijus Briedis.

Briedis offers five practical tips to protect against online threats

Use strong passwords and MFA: Use a unique password for each account and enable multi-factor authentication.

Be wary of "free" offers: Free video hosting sites often contain malware. Be especially vigilant with unknown domains.

Check links: Check suspicious links for URLs and spelling first.

Verify downloads: Only download files from trusted sources and scan them with tools such as Threat Protection Pro.

Keep software up to date: Regularly update operating systems, applications, and security software to close vulnerabilities.

For the...