Extortion and Ransomware Drive Over Half of Global Cyberattacks: Microsoft

SEATTLE, Oct 21 — Extortion and ransomware now account for over half of global cyberattacks, according to Microsoft’s 2025 Digital Defense Report. The study, led by Amy Hogan-Burney, Corporate Vice President of Customer Security & Trust, found that 52% of incidents investigated were financially motivated, while espionage-focused attacks represented just 4%.

Microsoft’s security teams process more than 100 trillion signals daily, blocking millions of new malware attempts and phishing emails. The report highlights how automation and AI tools have made cybercrime easier, enabling attackers with limited technical expertise to conduct large-scale operations.

Critical sectors such as hospitals, schools, and local governments remain top targets due to outdated systems and limited cybersecurity budgets. Attacks on these services have led to delayed emergency care and disrupted transportation. Ransomware groups exploit such vulnerabilities, often forcing victims to pay quickly to resume operations.

Ransomware – Extortions

Nation-state actors from China, Iran, Russia, and North Korea are expanding their reach, with motivations ranging from espionage to financial gain. Microsoft warns that state-affiliated groups are increasingly leveraging cybercriminal networks, complicating attribution and raising global risks.

The report also notes that over 97% of identity-based attacks are password-related, underscoring the importance of phishing-resistant multifactor authentication (MFA), which can block over 99% of such threats.

Microsoft calls for stronger collaboration between industries and governments, emphasizing that cybersecurity must be treated as a core strategic priority to counter both criminal and nation-state threats.

Full report: https://aka.ms/MDDR2025blog

Business News