2025ThreatDetectionReport_RedCanary.pdf

Techniques, trends, & takeways

22025 THREAT DETECTION REPORT

Table of contents

Introduction 3

Methodology 4

Trends 7

Ransomware 8

Initial access tradecraft 13

Identity attacks 17

Vulnerabilities 22

Stealers 24

Insider threats 27

VPN abuse 30

Cloud attacks 32

Mac malware 36

Featured technique: Email Hiding Rules 60

Featured technique: Mshta 62

Featured technique: Cloud Service Hijacking 64

Featured threat: Scarlet Goldfinch 40

Featured threat: Amber Albatross 42

Featured threat: Lumma…