Report by Ontinue
2H 2025 Threat Intelligence Report
7 FINDINGSPublished Mar 30, 2026
View Original Report →Key Findings
Botnets leveraged more than 500,000 compromised systems to power DDoS campaigns.
BotnetsDDoS
Global traceable ransomware payments fell from $892 million in 2024 to $820 million in 2025.
RansomwareRansomware PaymentRansom
More than 7,000 ransomware incidents were reported globally in 2025.
Ransomware
Distributed denial-of-service campaigns reached a peak of 31.4 Tbps.
DDoS
Listings of stolen credentials linked to LummaC2 increased by 72% on underground marketplaces.
Credential TheftStolen CredentialsLummaC2Underground Marketplace
Global ransomware payments reached $820 million in 2025.
RansomwareRansomware PaymentRansom
129 ransomware groups were active during 2025.
RansomwareThreat ActorsRansomware Groups