Summary
The ESET Threat Report for the second half of 2025 presents a detailed analysis of the evolving threat landscape, highlighting significant trends and emerging threats in cybersecurity. The report identifies the first known AI-powered ransomware, PromptLock, which utilizes an OpenAI model to generate malicious scripts dynamically. It discusses the resurgence of Lumma Stealer and the rise of CloudEyE, a malware-as-a-service downloader that has seen a substantial increase in activity. The report also notes a 40% year-over-year increase in ransomware victim numbers, with new players like Qilin and Warlock introducing innovative evasion techniques. Additionally, NFC threats have expanded, particularly in Brazil, while Nomani scams have become more sophisticated, employing deepfake technology and AI-generated phishing sites. The report emphasizes the rapid adaptation of cybercriminals and the challenges faced by cybersecurity professionals in detecting these advanced threats.
