Welcome to SOCRadar’s 2025 Baltic Regional Threat Landscape Report!

Explore the evolving cyber threats impacting Estonia, Latvia, and Lithuania with SOCRadar’s 2025 Baltic Regional Threat Landscape Report. This analysis reveals critical attack trends, targeted sectors, and underground activities—providing actionable intelligence to strengthen regional cybersecurity resilience.

Key Insights from the Baltic Cyber Threat Landscape:

• Financial Sector Under Heavy Fire: Finance and Insurance lead as prime targets, with over 50% of phishing attacks and 28.26% of dark web threats. Crypto markets and commercial banking also face elevated risk.

• Lithuania in the Crosshairs: 81.54% of phishing attacks and 39.1% of dark web threats focus on Lithuania, making it the most targeted Baltic nation.

• Ransomware Spread Across All Nations: Latvia and Lithuania each account for 36.4% of ransomware incidents, with Estonia close behind at 27.3%. Akira leads activity, followed by Hunters International and RansomHub.

• Dark Web Marketplaces Thriving: 60.2% of dark web activity involves selling stolen data or illicit access, with databases and websites as top targets.

• Phishing Campaigns Growing More Convincing: 75.16% of phishing sites use HTTPS, often leveraging financial lures and crypto-themed bait.

• DDoS Attacks on the Rise: 8,428 incidents recorded, peaking at 258.32 Gbps, threatening operational stability.

Why This Report Matters:

The Baltics face a diverse and rapidly evolving cyber threat environment, with threat actors targeting critical industries, exploiting regional infrastructure, and leveraging dark web markets.

SOCRadar’s report delivers:

• Early intelligence on threats targeting Baltic industries.

• Strategic insights on ransomware, phishing, and dark web exposure.

• Recommendations to strengthen cyber defenses and response readiness.

Take Action Now:

Protect your organization with SOCRadar’s advanced threat intelligence solutions:

• Dark Web Monitoring: Detect stolen credentials and illicit sales before exploitation.

• Ransomware Intelligence: Track active groups and their targeting patterns.

• Phishing Detection & Response: Neutralize phishing campaigns in real time.

Download the full report to stay ahead of cybercriminals and safeguard your digital ecosystem.