OAS - TOP CYBER THREATS 2025 - PART ONE

OAS has produced numerous articles within our blog about cybersecurity, however with the increase in technological advances particularly in AI, Machine Learning and Quantum computing, 

OAS has compiled a list of the top cyber threats for 2025. 

The combination of existing cyber treats such as Email compromise, malware and the normal Phishing practices, with the increasingly sophisticated threats such as AI-driven attacks, which jeopardize data and assets. Understanding these top threats is crucial for developing effective defences. Statista’s Market Insights estimates that global cybercrime costs will rise from $9.22 trillion in 2024 to $13.82 trillion by 2028, highlighting the urgent need for improved cybersecurity strategies. 

Top Cyber Threats 2025 

In 2025, top cybersecurity threats include AI-powered cyber-attacks that increase sophistication and evasion. Cybercriminals utilize AI to automate vulnerability detection, create convincing phishing schemes, and adapt to security measures in real-time. Traditional defences may fall short, necessitating organizations to invest in AI-driven security solutions and continuously update their strategies to counter these evolving threats.  

Deepfake Technology 

Deepfake technology uses AI to create realistic fake videos, images, or audio that can be difficult to distinguish from real content. Its use has surged dramatically, increasing by 550% from 2019 to 2023, with around 500,000 deepfakes shared on social media in 2023 alone. This figure is projected to reach 8 million by 2025. A notable example includes a fake photo of a celebrity endorsing a politician, highlighting the risks of misinformation. The rise of advanced AI tools and publicly available data contribute to the challenge deepfakes pose for cybersecurity. 

Malware Threats 

Malware, or malicious software, continues to be a formidable threat to cybersecurity landscapes worldwide. In 2025, AI-enhanced malware attacks have emerged as a primary concern for U.S. IT professionals, with 60% of IT experts globally identifying it as the most concerning AI-generated threat for the next 12 months. Below are some of the primary types of malware posing significant threats this year: 

Viruses and Worms

Viruses and worms are some of the oldest types of malware but remain highly effective due to their evolving mechanisms. Viruses attach themselves to clean files and infect other clean files, which can spread uncontrollably, damaging the system’s core functionality and corrupting data. Worms, on the other hand, self-replicate without human intervention and typically exploit vulnerabilities within the system’s network. Recent variations have seen worms that can evade detection by mimicking benign network traffic. 

Ransomware According to MoreField’s Cybersecurity 2025 forecast, ransomware attacks are at the forefront of emerging threats, with their frequency and sophistication on the rise. Demonstrating an alarming 81% year-over-year increase from 2023 to 2024, these attacks are becoming increasingly prevalent, underscoring the urgent need for enhanced security measures.

Cryptojacking Cryptojacking is a stealthy threat that remains under the radar but poses significant risks as it hijacks computer resources to mine cryptocurrency. Unlike other forms of malware, cryptojacking focuses on generating revenue without direct theft or data compromise, making it less noticeable but equally damaging in terms of resource utilization. 

Fileless Malware Fileless malware utilizes scripts or modules loaded directly into random access memory (RAM), avoiding any writing to the disk. This characteristic makes it challenging for conventional antivirus solutions to identify. Such attacks take advantage of legitimate programs to perform harmful activities, frequently circumventing user and endpoint protections. To address these malware threats, organizations should implement a layered security strategy that encompasses: 

• Regular software updates
• Comprehensive end-user training to defend against phishing
• Advanced threat detection systems
• Stringent access controls

By adopting a strong cybersecurity framework and performing regular audits, organizations can enhance early detection and mitigation of these cybersecurity risks. 

Social Engineering Attacks 

Fileless malware operates by using scripts or modules that are loaded directly into random access memory (RAM), thus evading any hard disk writing. This trait makes it difficult for traditional antivirus solutions to detect. 

Such attacks exploit legitimate applications to carry out malicious activities, often bypassing user and endpoint defenses. To combat these malware threats, organizations should adopt a multi-layered security approach that includes 

• Regular software updates 
• Thorough end-user training to guard against phishing 
• Advanced threat detection systems 
• Strict access controls

By establishing a robust cybersecurity framework and conducting regular audits, organizations can improve early detection and mitigation of these cybersecurity threats.  

Phishing Variants 

• Spear phishing: Spear phishing targets individuals with highly tailored and convincing messages, often appearing to be from colleagues or trusted sources. For example, attackers might pose as remote tech support agents to address VPN complications, leveraging common workplace issues to manipulate employees during widespread remote work periods.
• Vishing (voice phishing): In vishing scenarios, attackers use phone calls to extract sensitive information under the guise of legitimate requests. A typical scheme involves impersonators claiming to represent a bank, alerting victims about suspicious transactions and coaxing them into verifying personal account details, which can lead to financial theft.
• Smishing (SMS phishing): This technique involves text messages sent under the guise of urgency requiring immediate action such as clicking a link to track an undelivered package. The link, however, redirects the recipient to a malicious site intended to compromise personal data.

QR Codes Unveiled: 

From Simple Convenience to Cybersecurity Hazard What seems like a harmless QR code has turned into a dangerous tool for cybercriminals. An astonishing 25% of all email phishing attacks now take advantage of QR codes. The reason? Many unsuspecting users scan the codes without hesitation, leading to a perfect storm of vulnerability that is affecting organizations across the globe. 

 Baiting and Pretexting 

• Baiting: Baiting tactics involve enticing victims with the promise of goods or information. One common method includes distributing USB drives, purportedly containing important work-related data like employee salary lists, which actually contain harmful malware designed to infiltrate corporate networks.
• Pretexting: Attackers often use pretexting to obtain personal information under false presences. They might, for instance, pose as surveyors needing confidential data for supposed business or security audits, exploiting the targeted individuals’ trust and cooperative instincts.

 Business Email Compromise

Despite years of education and awareness campaigns highlighting the risks, Email Compromise remains a significant threat. 2025, Business Email Compromise (BEC) continues to be a widespread and sophisticated threat, exploiting email fraud to deceive companies into transferring money or sensitive information to cybercriminals. 

These schemes have advanced, with fraudsters conducting thorough research to convincingly imitate internal communications. 

For instance, attackers have leveraged compromised email accounts to request wire transfers, presenting them as urgent and confidential business transactions. Often, these fraudulent emails are only recognized as deceitful after the transfer has taken place, resulting in significant financial losses for organizations. 

To combat social engineering attacks, it is essential for organizations to emphasize security awareness training, enabling employees to identify and appropriately respond to such schemes. Additionally, implementing multi-factor authentication (MFA) can greatly diminish the risk of successful breaches stemming from social engineering strategies.

OAS - Network security at its best 

OAS is the leading Citrix solution provider in Southern Africa, committed to enhancing our clients' IT environments with superior security solutions. By integrating Citrix Secure Private Access with NetScaler API security solutions, OAS offers organizations highly effective network security protocols. 

Part two OAS will cover Network and Application Attacks.