Key Highlights:
- Rise of Loader-as-a-Service: Morte Loader campaigns signal a shift toward botnet-enabled initial access.
- Hacktivist Campaigns at Scale: NoName057(16) and DDoSia targeted geopolitical sectors with automated tools.
- Holiday Shopping Threats: Credential theft and skimmer campaigns spiked across the dark web in Q4.
- Industrialized Social Engineering: OTP bots and Telegram fraud tools exploited MFA in real time.
Whether you’re adjusting your threat models or planning 2026 priorities, this report captures the patterns that shaped the global threat landscape.
Share
Get started today
Experience the power of comprehensive
Experience the power of comprehensive
cybersecurity firsthand.
See SOCRadar in Action. Join 30,000+ security professionals who trust SOCRadar to protect their organizations.
150+
Countries
316
Partners
86M+
IPs Monitored
50K+
Brands Protected