Latin America and the Caribbean Cybercrime Landscape

Executive Summary: This Recorded Future/Insikt Group report analyzes cybercriminal trends in Latin America and the Caribbean during 2025, documenting widespread financially motivated activity—452 ransomware incidents—targeting healthcare, finance, government, manufacturing and education; prolific use of banking trojans and infostealers (notably LummaC2 and Vidar), growing botnet and payment-terminal malware activity, novel NFC-relay mobile fraud, use of Telegram and dark-web forums for coordination and monetization, occasional APT overlap, and recommended mitigations including patching legacy systems, intelligence monitoring, and public–private information sharing.