Research Report: 2025 State of the Underground

Stay ahead of underground threats.

The underground cybercrime economy is evolving—fast. Ransomware attacks surged by nearly 25% last year, data breaches increased by 43%, and the underground markets grew more sophisticated and resilient. Our 2025 State of the Underground report offers a deep dive into this shifting landscape, powered by cutting-edge, AI-driven analysis. Based on tens of thousands of dark web and deep web posts processed using Bitsight IQ, this year’s report brings you unparalleled visibility into key trends, including:

  • The rise of new ransomware gangs and their focus on smaller organizations
  • A record 2.9 billion unique credential leaks, up sharply from 2023​
  • The leading malware trends, including the emergence of Lumma and Risepro​
  • Shifts in hacktivism reflecting global geopolitical tensions
  • How AI is reshaping cyber defense strategies​

Download the report to get actionable insights to better protect your organization in an increasingly complex threat landscape. Want to make a tailored report of your own? Check out Bitsight Pulse.

"Despite everything happening, best practices remain remarkably consistent. Employing defense-in-depth, multifactor authentication, backups, data segmentation, employee awareness, and using robust identity management, to name a few, can go a long way in preventing major attacks."
 
 
Dor headshot


Dov Lerner
Staff Threat Researcher, CTI
Bitsight

 

Bitsight's State of the Underground 2025 Report Cover
  • We will use your information to communicate with you about this contact form and other solutions and related resources that may be of interest to you. You may unsubscribe at any time. For more information, please see our Privacy Policy.