TLDR: Gen Digital’s latest Q2 2025 Threat Report reveals a significant increase in sophisticated cybercriminal activities, largely fueled by artificial intelligence. The report highlights a surge in AI-powered ransomware like ‘FunkSec,’ widespread pharmaceutical fraud utilizing AI-generated reviews, and a dramatic rise in financial and sextortion scams employing deepfakes and chatbots. It also notes a general increase in data breaches, malicious push notifications, and remote access attacks, underscoring the evolving digital threat landscape.
Gen Digital’s comprehensive Threat Report for the second quarter of 2025 paints a concerning picture of the evolving digital threat landscape, indicating that cybercriminals are increasingly leveraging advanced technologies, particularly artificial intelligence, to execute more personalized and deceptive attacks. The report details a variety of escalating threats, including AI-driven ransomware, pervasive pharmaceutical fraud, and a sharp rise in social media-based scams.
One of the most alarming findings pertains to pharmaceutical fraud, where Gen identified over 5,000 fraudulent pharmacy domains. These sites deceptively promote heavily discounted medications, ranging from antibiotics to sexual health treatments. The sophistication of these scams is notable, featuring polished websites, AI-generated customer reviews, and malicious code injections designed to mimic legitimate pharmacies. In a three-month period, Gen successfully blocked approximately one million attacks linked to these fraudulent operations, which are primarily designed to steal personal and financial information.
Furthermore, the report highlights the emergence of AI-powered ransomware, exemplified by a strain dubbed ‘FunkSec.’ This innovative malware was orchestrated using generative AI to efficiently encrypt user data for extortion. However, Gen’s researchers discovered a critical vulnerability within FunkSec, enabling victims to recover their files without succumbing to the attackers’ demands. Following this discovery, a free decryptor was made publicly available, leading to the rapid disappearance of FunkSec—a testament to the fact that even AI-enhanced threats possess exploitable weaknesses.
The period between April and June 2025 also saw a dramatic 340% increase in financial scams. Many of these originated from deceptive advertisements on Facebook, employing deepfake videos and interactive chatbot interactions to trick users into divulging sensitive information under the guise of investment advice or legal assistance. Concurrently, sextortion scams doubled in prevalence during the same quarter, increasingly targeting mobile users with manipulative scripts.
Technical support scams also experienced a significant global rise of nearly 65%, with Facebook playing a crucial role in their dissemination. These scams typically involve fake messages that lock browsers, coercing users into contacting fraudulent support lines. The inherent trust users place in social media platforms like Facebook makes them prime targets for cybercriminals, facilitating the rapid spread of these deceptive practices.
Beyond these specific categories, the report provides a broader overview of the threat landscape, noting a 21% increase in data breach incidents, a 317% surge in malicious push notifications disguised as system alerts, and a 62% rise in remote access attacks. The persistent threat of the Lumma Stealer malware, which has resurfaced with new infrastructure for data exfiltration, further complicates the cybersecurity environment.
Also Read:
- AI-Enhanced Social Engineering Emerges as Strategic Threat to Operational Technology Sector
- SANS Report Highlights Human Vulnerability: Social Engineering Remains Top Cyber Risk, Amplified by AI
In response to these escalating threats, the report emphasizes the critical need for robust defensive measures. It advises consumers and organizations to remain vigilant, particularly regarding offers that appear too good to be true, such as unusually low-cost prescriptions from unfamiliar pharmacies. Users are also encouraged to utilize reliable security tools and limit their data exposure on social platforms to protect against potential scams. The report concludes by acknowledging AI’s dual role: while it empowers criminals, it also provides defenders with advanced tools for detection and response, making proactive defense strategies and comprehensive security solutions essential in combating the increasingly sophisticated cyber threat environment.
