A Look into the Future: ESET’s Insight on the 2025 Threat Landscape
Published: 16 Dec 2025
•
,
Estimated Reading Time: 2 min.
The latter part of 2025 showcased the rapid evolution of cyber threats, as attackers continuously adapted and introduced innovative tactics.
AI-powered malware became a reality in the second half of 2025, with ESET uncovering PromptLock, the first AI-driven ransomware capable of generating malicious scripts in real-time. While AI is primarily used for crafting convincing phishing content, the emergence of threats like PromptLock indicates a new era of cybersecurity challenges.
Despite a brief resurgence, Lumma Stealer experienced a significant decline in detections by 86% compared to the first half of the year, signaling a potential end to its prominence. On the other hand, CloudEyE, also known as GuLoader, witnessed a substantial increase in ESET telemetry, serving as a downloader and cryptor for various malware strains.
Ransomware attacks surged in the latter half of the year, with projections indicating a 40% year-over-year increase. Notable ransomware variants like Akira, Qilin, and the newcomer Warlock introduced sophisticated evasion techniques, posing challenges for endpoint detection and response tools.
On the Android platform, NFC threats continued to evolve, with new malware like RatOn combining RAT capabilities with NFC relay attacks. Additionally, Nomani investment scams refined their tactics, utilizing advanced technologies like deepfakes and AI-generated phishing sites.
Stay updated on ESET research via Twitter, Bluesky, and Mastodon for the latest trends and threats.For more insights on leveraging threat intelligence for enhanced cybersecurity, visit the ESET Threat Intelligence page.
