Report by Ontinue

2H 2025 Threat Intelligence Report

7 FINDINGSPublished Mar 30, 2026
View Original Report →

Key Findings

Botnets leveraged more than 500,000 compromised systems to power DDoS campaigns.

BotnetsDDoS

Global traceable ransomware payments fell from $892 million in 2024 to $820 million in 2025.

RansomwareRansomware PaymentRansom

More than 7,000 ransomware incidents were reported globally in 2025.

Ransomware

Distributed denial-of-service campaigns reached a peak of 31.4 Tbps.

DDoS

Listings of stolen credentials linked to LummaC2 increased by 72% on underground marketplaces.

Credential TheftStolen CredentialsLummaC2Underground Marketplace

Global ransomware payments reached $820 million in 2025.

RansomwareRansomware PaymentRansom

129 ransomware groups were active during 2025.

RansomwareThreat ActorsRansomware Groups