Red Report 2025: Unmasking a 3X Spike in Credential Theft and Debunking the AI Hype

Picus Labs' Red Report 2025 analyzes over one million malware samples and 14 million malicious actions, identifying a threefold increase in credential theft from password stores, the concentration of attacker behavior around the top 10 MITRE ATT&CK techniques (covering 93% of attacks), and the rise of multi-stage "SneakThief" infostealers that combine stealth, automation, persistence, and data exfiltration; the report also finds no evidence of novel AI-driven malware in 2024 and urges organizations to adopt proactive, adversary-informed validation and breach-and-attack simulation to defend against these trends.