Сrimeware and financial cyberthreats in 2025

Kaspersky’s bulletin reviews 2024 financial cyberthreats and evaluates prior predictions, confirming major trends such as the rise of AI-powered attacks (including biometric bypass), expansion and globalisation of Brazilian banking Trojans (targeting >1,700 banks across 45 countries), increased fraud against instant payment systems (PIX, UPI, FedNow concerns), growth in mobile financial threats and stealers, notable supply-chain compromises (the XZ backdoor) and exploitation of misconfigured cloud services (EMERALDWHALE: ~15,000 stolen credentials, >10,000 repos). It also documents a sustained market for zero-day exploits, fluid ransomware affiliate ecosystems, and adoption of cross-platform languages for malware, and outlines forward-looking risks for 2025 including RaaS proliferation, data-poisoning ransomware, and more supply-chain/open-source attacks.