FakeUpdates leads India’s malware threats in May: Check Point report

FakeUpdates continued to dominate malware activity in India in May 2025, according to Check Point Software Technologies’ latest Global Threat Index. The downloader malware maintained its position as the most widespread threat across Indian organisations, while newly prominent ransomware group SafePay emerged as the top global ransomware actor.

The May 2025 threat landscape, published by Check Point Software — a NASDAQ-listed cybersecurity firm — also shows that Remcos and Androxgh0st followed FakeUpdates as the most active malware families in…