logo

IT threat evolution in Q2 2025. Non-mobile statistics

ID: e47f5af4-7744-5200-9d58-f88b70ff950c

STIX ID: report--e47f5af4-7744-5200-9d58-f88b70ff950c

Feed Name: Securelist by Kaspersky

Threat Score
78/100

Date Published: 2025-09-05

Date Updated: 2026-04-29

Author: AMR

...
...

Kaspersky’s Q2 2025 non-mobile threat report provides global telemetry and analysis: 471M web attacks blocked, ~23M malicious files detected, 1,702 new ransomware variants, ~86k ransomware victims and ~280k users targeted by miners. The report highlights active exploitation of critical vulnerabilities (SAP NetWeaver CVE-2025-31324, Fortinet CVEs, and a Windows CLFS zero-day CVE-2025-29824), prolific ransomware groups (Qilin, Clop, Akira), macOS spyware (PasivRobber), expanding IoT botnets (NyaDrop, Prometei), common TTPs (vulnerability chaining, social-engineering via Zoom/Telegram), and several law-enforcement arrests tied to ransomware operations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.