CrowdStrike 2025 Threat Hunting Report

Adversaries Weaponize and Target AI at Scale.

The AI era has redefined how adversaries operate. See what CrowdStrike threat hunters have uncovered.

• 320+ companies infiltrated by DPRK-nexus adversaries using GenAI accelerated attacks
• 81% of hands-on-keyboard intrusions were malware-free ¹
• 136% surge in cloud intrusions ²
• 2X: vishing is on track to double last year’s volume ³
• 24 hours: how quickly SCATTERED SPIDER moved from account takeover to ransomware deployment

¹ in the last 12 months

² in the first half of 2025 compared to all of 2024

³ by the end of 2025