Unmasking the latest trends of the financial cyber threat landscape

This report outlines evolving cyber threats to the global financial sector, emphasizing the rapid growth of Phishing-as-a-Service (including QR-code quishing), more sophisticated BEC techniques, increasing open-source and financial-aggregator supply-chain compromises, expansion of banking malware and spyware (e.g., Grandoreiro, SpyNote) into new regions, prolific ransomware and exfiltration-based extortion (LockBit and others), and active state-sponsored operations—particularly DPRK-linked groups—targeting DeFi and crypto infrastructure.