IT threat evolution in Q2 2025. Non-mobile statistics

IT threat evolution in Q2 2025, non-mobile statistics, shows a broad surge across online and IoT threats. In the quarter, Kaspersky solutions blocked more than 471 million attacks originating from internet resources, with Web Anti-Virus detecting 77 million unique links and File Anti-Virus blocking nearly 23 million malicious objects. Ransomware activity yielded 1,702 new modifications and targeted almost 86,000 users, with 12% of victims whose data appeared on data leak sites linked to the Qilin group.

The IoT threat landscape expanded, with NyaDrop growing to 30.27% of threats delivered to honeypots and BitCoinMiner activity dropping to 1.57%; new IoT families such as Agent[.]nx and Prometei were observed, Prometei described as a Linux version of a Windows botnet. Attacks on IoT honeypots showed SSH origins increasingly concentrated in Germany and the United States, while China and India continued to account for a large share of Telnet-based attacks. Overall, 279,630 unique Kaspersky users faced miner attacks and 85,702 users were attacked by ransomware Trojans in the quarter, according to Kaspersky.