DNSFilter-Annual-Security-Report-2026.md

DNSFilter’s 2026 Annual Security Report presents DNS-layer telemetry for Oct 2024–Sep 2025 showing a ~30% year-over-year rise in threats, with large volumes of malware and phishing, the emergence and expansion of PhaaS Tycoon 2FA, discovery of Lumma Stealer (fileless infostealer via fake CAPTCHA), significant TLD and regional blocking trends, AI-related domain activity, CSAM blocking growth, and spikes in malicious traffic tied to major outages and seasonal campaigns.