Huntress released its 2025 Cyber Threat Report summarizing key threat trends observed across thousands of organizations in 2024. Key findings include: RATs (like AsyncRAT) were used in over 75% of remote access incidents; legitimate RMM tools like TeamViewer are being weaponized for lateral movement; ransomware groups are shifting from encryption to data theft and extortion; 'living off the land' techniques using LOLBins and Sysinternals are increasing; and phishing is evolving with QR code attacks and brand impersonation. Additionally, infostealers accounted for 24% of incidents, malicious scripts 22%, and ransomware is fragmenting into smaller, harder-to-track affiliate groups following major takedowns.
Table of contents
Top takeaways from the 2025 Cyber Threat ReportHow these trends took shape in 2024Why these findings matterGet more from the report and stay one step ahead2 Impressions