At the end of the final quarter, it is essential to reflect on the trends, tactics and techniques that have dominated the cyber threat landscape throughout the year. This retrospective analysis not only highlights the evolving strategies employed by cybercriminals, but also serves as a crucial foundation for anticipating the challenges that lie ahead in the coming year.

In examining this year’s developments, it becomes evident that cybercriminals are becoming increasingly adept at refining their attack vectors, driven by a combination of technological advancements and a deeper understanding of organizational vulnerabilities. This maturation process means that data theft is no longer limited to straightforward phishing scams or malware attacks, and instead encompasses a wide range of sophisticated tactics that leverage artificial intelligence, social engineering, and automation.

With that in mind, here are some key cyber threat predictions to watch for in 2025:

Data-theft techniques

1.    Evolving QR code scams: Following this year’s trend, QR code phishing scams will become more enticing, tricking victims into sharing sensitive payment and personal information. Increased public awareness and caution will be crucial.

2.    Formjacking: The rise of e-commerce and reliance on third-party scripts will make formjacking a major threat, as attackers inject malicious code into web forms to steal sensitive data.

3.    Malicious browser extensions: Users may unknowingly install extensions that harvest personal data, emphasizing the need for vigilance when adding new tools.

4.    Credential stuffing: Cybercriminals will leverage stolen username/password pairs to access multiple accounts, underscoring the importance of unique, strong passwords.

5.    Man-in-the-Middle (MitM) attacks: These attacks will intercept communications and may even capture 2FA tokens, allowing unauthorized access to accounts.

6.    IoT device exploits: Vulnerabilities in connected devices will create new avenues for data theft, as the number of IoT devices continues to grow.

Living-off-the-Land (LOL) attacks

Expect a rise in LOL attacks, where cybercriminals utilize native system tools to bypass traditional defenses, making detection increasingly difficult. This approach can serve as a gateway to more sensitive systems, particularly in Operational Technology (OT) environments.

Escalation of supply chain attacks

Supply chain attacks will intensify, with attackers targeting third-party suppliers to infiltrate larger organizations. The accessibility of AI tools will make these attacks more affordable, as infostealers malware targets digital identities and authentication data, undermining multi-factor authentication (MFA) protections. State-sponsored actors will also exploit supply chain vulnerabilities to penetrate high-profile targets, showcasing the persistent nature of these threats.

AI-supported disinformation campaigns

Cybercriminals will increasingly use AI to create hyper-realistic deepfake content, complicating the landscape of disinformation. Organizations must enhance verification processes, as traditional indicators of authenticity.

AI-powered cyber warfare

The fusion of AI in cyber warfare will accelerate the speed and scale of attacks on critical infrastructure. As AI drives both offensive and defensive strategies, organizations will need to adopt AI-powered security solutions to stay ahead of these evolving threats.

As we navigate this complex cyber landscape, vigilance and proactive measures will be essential to protect against the increasingly sophisticated techniques employed by cybercriminals. The threat environment is continuously evolving, with attackers leveraging advanced technologies and tactics that challenge conventional security protocols. This necessitates a multifaceted approach to cybersecurity that goes beyond traditional reactive measures.