DeepInstinct Cyber Threat Landscape Report 2025

Keypoints

• Most cybersecurity reports follow a standard structure, typically including an introduction, threat overview, detailed analyses of malware and attack techniques, sector-specific impacts, threat actor profiles, and future predictions, providing comprehensive insights for stakeholders.
• Key statistics reveal a 30% increase in global cyberattacks in Q2 2024 compared to the same period in 2023, with ransomware attacks accounting for a significant share and demonstrating slower growth than previous years, indicating evolving threat sophistication.
• Major threat trends include a surge in ransomware campaigns, notably using Ransomware-as-a-Service (RaaS) models such as LockBit and emerging groups like RansomHub, with high-profile attacks on healthcare sectors demanding multimillion-dollar ransoms.
• Notable statistics highlight France and South Africa as the most targeted countries, with upwards of 74% and 69% of organizations respectively experiencing ransomware incidents, and the healthcare sector being overwhelmingly impacted.
• Attackers employ advanced tactics such as doubleExtortion, leveraging zero-day vulnerabilities, and adopting AI for automated reconnaissance, evasion, and phishing campaigns, signaling a continuously evolving threat landscape.
• Global responses through law enforcement Disclosures and sanctions target groups like LockBit and Black Basta, causing temporary disruptions but with threat actors often rebounding quickly, emphasizing the adaptive nature of cybercrime ecosystems.
• The ecosystem is shifting toward data brokers and information leaks as criminal groups evade sanctions, sustaining cyber threat activities indirectly through theft and sale of stolen data.
• Geopolitical conflicts, including the Israel-Hamas war, Russia-Ukraine war, and China-Taiwan tensions, are increasingly host to cyber operations, with nation-states employing cyberattacks for strategic advantages in pre-conflict and wartime scenarios.
• AI-based attacks have grown more sophisticated, with criminals using automation for targeted phishing, malware evasion, and vulnerability detection, making cybersecurity defenses more challenging and necessitating AI-adapted security solutions.