ThreatLandscapeReport:

CybercrimeintheCryptoEra

ThreatLandscapeReport:

CybercrimeintheCryptoEra

Authors

GeorgeKeithEdward

GlassWojcieszekCurrie

Thefirsthalfof2025sawthecontinuationofthecomplexthemesthatshapedthethreatlandscapein2024.

Emailcompromiseretaineditsplaceasthemostprominentthreattype,whilephishingcontinuedtotakethelead

ininitialaccessmethods.YetanothertrendthatpersistedwasthatofgroupssuchasAKIRA,PLAYand

LOCKBITretainingtheirplaceaskeyransomwareplayers.However,alongsidefamiliarthreattypesandplayers,

risksassociatedwithcryptocurrencyprovedtobeanotablethemeinQ12025,likelyduetochanging

regulationsandariseinmalwareleveragingtheblockchain.Asaresult,thisreportfocusesonkeyfindingsand

observationsaroundcryptocurrency.

Withsignificantpotentialrewards,cryptocurrencyhasbecomethefocusforcyberattackersalmostasfastasit

hasforinvestors.Thispresentssomeuniquelycomplexandunprecedentedsecurityrisks.Politicalshiftshave

ledtomoregiantleapsforwardintothemainstream—furtherdrivingthescopeforattacks.TheKrollCyber

ThreatIntelligenceteamobservedthatnearly$1.93billionwasstolenincrypto-relatedcrimesinthefirsthalfof

2025alone,surpassingthetotalfor2024andputting2025ontracktobetheworstyearfordigitalassettheft.

Additionally,phishingattackstargetingcryptocurrencyusersincreasedby40%,primarilythroughfake

exchangesites.Theseunderscorethegrowingcybersecurityrisksinthecryptospace,fromdirecttheftsand

hackstomoresophisticatedscamsandlaunderingoperations.

Continuereadingformoreinsightsintothecryptocurrencysecurityrisksshaping2025andthestepsyoucan

taketosafeguard