2025 Midyear ransomware surge against manufacturing, technology, and the US
Trend
Summary
Hide ▲
Show ▼
Ransomware activity jumped 179% in Jan. 1 through June 30, 2025, increasing pressure on manufacturing and technology organizations and the US. The surge reflects a broader ransomware market that is still expanding through the RaaS model. Attackers are also shifting toward pure extortion, reducing dependence on encryption. Limited use of AI-assisted phishing tooling adds another layer of risk for defenders.
Related Happenings
Gentlemen ransomware operation using compromised credentials and exposed services
Malware Activity
H score18
First: 29.12.2025 16:26
Last: 29.12.2025 16:26
Sources 1
About this happening:
**Gentlemen ransomware** is actively extorting victims by using **compromised credentials** and **Internet-exposed services** to enter networks. It encrypts files, drops **README-...
Gentlemen ransomware operation using compromised credentials and exposed services
Malware ActivityAbout this happening: **Gentlemen ransomware** is actively extorting victims by using **compromised credentials** and **Internet-exposed services** to enter networks. It encrypts files, drops **README-...
Timeline
-
28.08.2025 21:49 2 articles · 10mo ago
Ransomware attacks rise 179% across manufacturing, technology, and US targets
Campaign Scope UpdateFlashpoint's midyear recap says ransomware attacks increased 179% during Jan. 1 through June 30, 2025 versus the same period in 2024, with manufacturing and technology industries remaining popular targets and the US ranking as the most targeted country. The recap also ties the growth to the RaaS model and continued initial access through unpatched vulnerabilities.
Show sources
- Akira, Cl0p Top List of 5 Most Active Ransomware-as-a-Service Groups — www.darkreading.com — 28.08.2025 21:49
- Akira, Cl0p Top List of 5 Most Active Ransomware-as-a-Service Groups — www.darkreading.com — 28.08.2025 21:49