Weekly report by the TG Soft CRAM, concerning Italian malspam campaigns.

Below are the details of the campaigns released during from 10 November to 16 November 2025.

During the monitored week, global campaigns increased significantly compared to the previous week, with campaigns in Italian also on the rise.

The week was characterized by Password Stealer of the Familiies:

In order to understand how the various weeks are divided, below is a small table showing the breakdown of the considered period:

During the week, the peak in global campaigns was recorded on Friday 14 November, with 10 different campaigns per day. The peak of campaigns in Italian was recorded on Tuesday 11 November, with 6 campaigns per day, as shown in the graph below:

In the following chart we see the malware families spread globally for each day of the week:

Instead in this graph we see the distribution based on malware family. In the past week 7 different families were detected:

The samples that ranked first this week are Script files with 62.50%.
In second place are Office documents (Word, Excel, PowerPoint) with 22.50%.
In third place are WIN32 executable files with 7.50%.

Nella figura sottostante possiamo vedere le varie tipologie di linguaggio con cui vengono sviluppati i malware:

In the following graph we see the distribution of the various types of languages divided by day:

Check out the October/November campaigns

We invite you to check out the October/November 2025 reports, to stay up-to-date on the malspam campaigns circulating in Italy: