CYFIRMA Research- Tracking Ransomware- June 2025
Description
Stay ahead with CYFIRMA’s Monthly Ransomware Report – June 2025. June saw 463 ransomware victims globally, a 15% decline from May. Qilin led the threat landscape, exploiting Fortinet flaws and adding legal pressure tactics. New players like Fog and Anubis adopted stealthy, modular toolkits and file-wipers for maximum damage.
Emerging groups Teamxxx, Warlock, and kawa4096 are gaining traction, each demonstrating unique behaviors from Chaos-based payloads to single-system attacks without data exfiltration. The U.S., Canada, and the UK were top targets, with professional services, IT, and healthcare sectors most affected. Dragonforce surged, while Play and Safepay activity dropped. Attackers now blend open-source tools, cloud abuse, and RMM exploits to evade detection.
Get CYFIRMA’s insights to stay one step ahead.
Link to the Research Report: https://www.cyfirma.com/research/tracking-ransomware-june-2025/
#CyberSecurity #Ransomware #ThreatIntel #ETLM #CYFIRMA #Qilin #Teamxxx #Warlock #kawa #Play #Dragonforce #safepay #CYFIRMAresearch #ExternalThreatLandscapeManagement #ETLM
https://www.cyfirma.com/
United States
