❌

Normal view

Received before yesterday

Security Operations – Sophos News
The Sophos Annual Threat Report: Cybercrime on Main Street 2025 16 April 2025 at 05:00

The Sophos Annual Threat Report: Cybercrime on Main Street 2025

Security Operations – Sophos News

By:gallagherseanm

16 April 2025 at 05:00

Ransomware remains the biggest threat, but old and misconfigured network devices are making it too easy

Figure 2: Relative frequency of initial compromise points by cybercriminals against small and medium businesses, based on all incident data. Initial compromise causes here overlap in some cases

Figure 3: Relative frequency of initial compromise points specifically observed in ransomware and data exfiltration/extortion attacks by cybercriminals against small and medium businesses, based on Sophos MDR and Incident Response incident data

How Sophos names STACs STACs are assigned numeric identifiers that are generated based on the type of activity, with their first digit representing motivation: 1: State-sponsored 2: Hacktivist 3: Initial access brokers 4: Financially motivated cybercrime 5: Ransomware affiliates 6: Unknown

Figure 4: Frag Ransomware note associated with a STAC5881 attack

Figure 6: Remote ransomware attacks from 2022 to 2024 by quarter

Figure 7: A developer browser view of a FlowerStorm phishing page

A login screen with a picture of a raccoon with a human body dressed in futuristic gunslinger garb.

A screenshot of the same raccoon from figure 8 from a generative AI website.

Figure 10: A phishing email with a QR code targeting Sophos employees

Figure 11: The fake authentication window for the phishing site the QR code directed targets to, with a Cloudflare security check to validate the target