Welcome to SOCRadar’s 2025 Lebanon Threat Landscape Report!

Explore the concentrated and evolving cyber threats targeting Lebanon’s digital space with SOCRadar’s 2025 Lebanon Threat Landscape Report. This focused analysis reveals critical vulnerabilities, ransomware trends, dark web exposures, and credential theft patterns—arming cybersecurity teams with intelligence to safeguard Lebanon’s digital ecosystem.

Key Insights from Lebanon’s Cyber Threat Landscape:

• Public Sector Under Siege: The public administration sector accounts for 26.32% of all cyber threats, underscoring its status as the most targeted sector in Lebanon.

• Dark Web Dominance: A staggering 88.90% of dark web threats are aimed exclusively at Lebanon. Data and database theft make up 74% of these threats, emphasizing a data-centric attack focus.

• Ransomware Fragmentation: Stormous (21.43%) and FunkSec (20.12%) lead a fragmented ransomware ecosystem, with nearly half of attacks originating from various other groups.

• Credential Theft Crisis: Over 556,000 email-password combinations and 8,269 credit card records have been compromised. Alarmingly, 85.63% of stolen credentials are linked to mbc.net, suggesting targeted campaigns.

• DDoS Threats Persist: Lebanon experienced 468 DDoS attacks with a peak bandwidth of 63.02 Gbps, posing operational disruption risks.

Why This Report Matters:

Lebanon’s digital assets are under continuous assault from a variety of cyber threats, from ransomware to dark web exploitation. As data breaches, unauthorized access, and credential theft intensify, organizations must embrace intelligence-led defenses.

SOCRadar’s report provides organizations with:

• Insightful threat data tailored to Lebanon’s most vulnerable sectors.

• Tactical knowledge on ransomware groups, phishing campaigns, and dark web activities.

• Strategic recommendations for enhancing cyber resilience.

Take Action Now:

Protect your infrastructure and data with SOCRadar’s advanced threat intelligence services:

• Dark Web Monitoring: Detect and mitigate exposure of credentials and sensitive data.

• Ransomware Intelligence: Track evolving threat actors and preempt ransomware attacks.

• Identity & Access Intelligence: Address stealer malware threats and compromised credentials.

Download the full report today to defend against cyber threats impacting Lebanon’s digital future.