Cyber threats impacting the financial sector in 2024: Focus on main actors

**Executive summary:** This report synthesizes observed 2024–early-2025 campaigns against the financial sector, highlighting the central role of Initial Access Brokers, prolific ransomware and extortion groups, advanced banking trojans and mobile malware, widespread Adversary-in-the-Middle (AiTM) phishing delivered via Phishing-as-a-Service, and state-sponsored APT activity (notably North Korea, Iran, and China) that at times collaborates with cybercriminal operators to monetise access and obscure attribution.