What’s Really Attacking Your Industry? Insights From 74K Sandbox Analyses
ANY.RUN says one bank's 74,086 sandbox runs had a 12.8% malicious yield, matching peers.
ANY.RUN published aggregated sandbox statistics from 74,086 analyses by an anonymized financial organization between March 30 and June 22, 2026. Of those, 8,520 were malicious, 992 suspicious, and 64,574 clean, for a 12.8% malicious yield versus a 13.0% banking-sector median. Files were far riskier than URLs, at 58.8% versus 25.6% malicious, with PowerShell scripts at 88.2% and MSI installers at 75.2%. Median time to detection was 15.1 seconds, slightly faster than the sector's 16.9 seconds. The post promotes personalized industry comparisons using customer data.