Finance.Yahoo

Rapid7 Q3 2025 Report Details Rise in Ransomware Groups and AI Weaponization

First seen 12 Nov 2025, 19:02 UTC • Stocktitan

•81% similarity •36.9

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Rapid7's Q3 2025 Threat Landscape Report, released on November 12, 2025, reveals an increase in active ransomware groups from 65 to 88. The report highlights the growing use of generative AI by attackers and a 21% decrease in newly exploited vulnerabilities, with a focus on older, unpatched CVEs such as CVE-2025-53770 and Cisco ASA/FTD flaws.

ThreatCluster AI

Attack Flow

12 entities, 21 inferred relationships (STIX 2.1).

Technique (5)

Malware
Phishing
Ransomware
Supply Chain Attack
T1566 - Phishing

Vulnerability (1)

CVE-2025-53770

Malware (1)

LAMEHUG

Affected Platform (2)

Cisco ASA/FTD
Microsoft SharePoint

Threat Actor (3)

Qilin
Safepay
WorldLeaks

Relationships

Qilin uses LAMEHUG
Safepay uses LAMEHUG
WorldLeaks uses LAMEHUG
Qilin uses Malware
Qilin uses Phishing
Qilin uses Ransomware
Qilin uses Supply Chain Attack
Qilin uses T1566 - Phishing
Safepay uses Malware
Safepay uses Phishing
Safepay uses Ransomware
Safepay uses Supply Chain Attack
Safepay uses T1566 - Phishing
WorldLeaks uses Malware
WorldLeaks uses Phishing
WorldLeaks uses Ransomware
WorldLeaks uses Supply Chain Attack
WorldLeaks uses T1566 - Phishing
LAMEHUG exploits CVE-2025-53770
CVE-2025-53770 targets Cisco ASA/FTD
CVE-2025-53770 targets Microsoft SharePoint

Community

Browse all →

Rapid7 Q3 2025 Report Details Rise in Ransomware Groups and AI Weaponization

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading