Report by Comcast Business
2025 Cybersecurity Threat Report
Key Findings
Comcast Business blocked 2M web attack C2 attempts.
Over a six-month period, Comcast Business detected and blocked more than 708 million command and control attempts. These included over 191 million attempts made through proxy-based channels.
Comcast Business blocked 497M phishing-linked C2 attempts.
Comcast Business blocked 191M proxy-based C2 attempts.
Comcast Business detected 34.6 billion cybersecurity events over that 12-month period.
Comcast Business detected 44,000 DDoS attacks, which often utilised short bursts and carpet-bombing techniques to overwhelm and test defenses
Drive-by compromise emerged as a prevalent initial access vector, with nearly 9.8 billion events blocked.
Comcast Business detected 4.7 billion phishing attempts, which specifically targeted human error and poor credential hygiene.
DDoS short bursts used as reconnaissance were also observed: 405 events in less than 5 minutes and 56 events in less than 10 seconds.
Comcast Business blocked 2.5K mobile threat C2 attempts.
Comcast Business blocked 2M botnet C2 atttempts.
Comcast Business blocked 1.7M Windows exploit C2 attempts.
Comcast Business blocked 1.1M spam-source C2 attempts.
Comcast Business detected 19.5 billion resource development events, which indicate that attackers are heavily investing in infrastructure.
Comcast Business blocked 13M scanner-to-C2 transitions attempts.