ESET Unveils Critical Trends in Cybersecurity Threats
The latest threat landscape trends from ESET Research highlight a significant evolution in AI-driven attacks and the proliferation of NFC threats. These insights are compiled in their recently released H2 2025 Threat Report, detailing cyber threats observed between June and November.
Emergence of AI-driven Malware
In this period, ESET identified unique threats like PromptLock, recognized as the first AI-powered ransomware that can dynamically generate malicious scripts. This alarming development signifies a transition from theoretical discussions about AI in cybercrime to tangible, real-world threats that demand urgent attention.
AI in Scamming Techniques
Fraudsters have significantly advanced their methods, particularly with the Nomani investment scams. With a notable increase in the use of high-quality deepfakes and AI-crafted phishing sites, the strategies employed are more sophisticated than ever. ESET telemetry indicates a remarkable 62% rise in detections of these scams year-over-year, despite a slight decrease noted in the latter part of 2025.
Trends in Ransomware
The ransomware landscape saw a substantial surge, with ESET's predictions indicating a 40% increase in victims compared to the previous year. Two new players, Akira and Qilin, are dominating the ransomware-as-a-service sector, while newcomers like Warlock introduce innovative evasion techniques that present continuous challenges for cybersecurity defenses.
Strong Endpoint Defenses
The prevalence of EDR (Endpoint Detection and Response) tools has impeded ransomware activity, emphasizing their crucial role in safeguarding organizations. These tools effectively challenge attackers and prevent them from expanding their reach.
The Rise of NFC Threats
Among mobile platforms, NFC threats have markedly increased in complexity and volume, with ESET telemetry reporting an astonishing 87% rise. Significant developments include upgraded threats like NGate, which have started implementing contact-stealing functionalities, and RatOn—a new entrant blending remote access capabilities with NFC relay attacks. These threats highlight cybercriminals' relentless pursuit of novel and dangerous methods.
Substantial Malware Increases
Malware like CloudEyE, also referred to as GuLoader, has dramatically surged, mainly through malicious email campaigns. This downloader and cryptor can deploy various malware types, including ransomware and infostealers like Rescoms and Formbook, with Poland being notably affected by these threats.
A Future of Cybersecurity Challenges
ESET is committed to addressing these emerging threats through continuous innovation and robust cybersecurity strategies. Their proactive research and development stay ahead of evolving global cyber threats, ensuring that both businesses and individuals remain secure. The advances in AI and persistent threats from NFC technologies underscore the ever-changing landscape of cybersecurity.
Frequently Asked Questions
What does the H2 2025 Threat Report reveal?
The report indicates a rise in AI-driven attacks and sophisticated NFC threats disrupting the cybersecurity landscape.
What are some advancements in ransomware in H2 2025?
New ransomware varieties like Akira and Qilin have emerged while innovative evasion techniques continue to complicate defenses.
How are scammers using AI?
Scammers are employing AI to create convincing deepfakes and phishing sites, making scams more difficult to detect and avoid.
What are NFC threats?
NFC threats involve cybercriminals exploiting near-field communication technology to compromise personal data and deploy malware.
How is ESET addressing these challenges?
ESET focuses on cutting-edge cybersecurity solutions, leveraging AI and expert analysis to combat these evolving threats effectively.
