Windows users are being hit by malware at nearly six times the rate of macOS users, according to new data from Surfshark. The cybersecurity company analyzed 391,305 malware detections logged between January and July 2026, finding that while Windows devices made up 66% of Surfshark Antivirus’ active user base, they accounted for a striking 92% of all threat detections – compared to just 8% for macOS, despite macOS users representing 34% of the user base.
“Windows’ popularity has always made it the biggest target for cybercriminals, and this year’s numbers make that gap harder to ignore – nearly six detections per Windows user for every one on macOS. That comes down to the sheer scale of malware built to exploit Windows’ dominant market share, plus real differences in how each platform handles third-party software and security permissions. It’s a reminder that user vigilance matters just as much as having reliable antivirus protection running in the background,” says Gabrielė Sinkevičiūtė, Head of Product at Surfshark.
Trojans dominate on Windows, phishing surges on macOS
Surfshark’s report shows clear differences in the types of threats facing each platform. Trojans and riskware were the two most common malware categories on both operating systems, but trojans were considerably more prevalent on Windows, accounting for 46% of detections compared with 25% on macOS. Riskware made up 19% of Windows detections and 17% of macOS detections.
Viruses accounted for an identical 9% share of detections on both platforms, while heuristic detections (flagging files behaving like malware even before they appear in threat databases) made up 13% of macOS detections and 8% of Windows’.
Phishing emerged as a far more significant threat on macOS, ranking third on that platform at 15% of detections, compared with just 3% and sixth place on Windows.
According to Gabrielė, many Mac users still operate under the assumption that their device is inherently safer, which can make them more susceptible to social engineering tactics like phishing rather than traditional malware.
“Phishing doesn’t rely on exploiting software vulnerabilities the way trojans or viruses do – it exploits trust and human behavior instead, which makes it just as effective on a Mac as it is anywhere else. If anything, that false sense of security can make macOS users a softer target, since they may be less likely to question a suspicious email or message in the first place.”
Adware rounded out the notable threats detected by Surfshark Antivirus, accounting for 4% of Windows detections and 3% of macOS detections.
For the complete research material behind this study, click here.
