The worst botnets and banking trojans were Emotet, Trickbot, and Zeus Panda. The top three in cryptomining/cryptojacking were GhostMiner, Wanna Mine, and Coinhive. Lazarus Group, Sofacy and MuddyWater came in the top three spots in the list of top 10 threat actors so far this year. North Korea, Russia, Iran, China, India, Microsoft Office was the most exploited application, Adobe Flash, WebLogic, Drupal and GPON routers were also listed in top 10.HSBC Bank disclosed a data breach but didnt say how many customers were affected.”]
Source: https://www.csoonline.com/article/3319116/worst-malware-and-threat-actors-of-2018-so-far.html