This is survivor bias because bad guys that suck are ignored as "noise". There is a ton of very low-tech outdated vulnerability scanning going on that is not at all current.
We might see a return of some viruses and worms patching out others so they can keep running, but with AI.
That could lead to some interesting paradoxes. A sovereign AI who's tasked itself to make the internet more secure, for example.
Blaster/Sasser but with AI and now multiplatform, more harmful than macro viruses too.