Cairo: Jasour – News Desk
Kaspersky’s Global Research and Analysis Team (GReAT) has outlined their predictions for the 2025 advanced persistent threat (APT) landscape, highlighting significant shifts in cyber threats. These include the rise of hacktivist alliances, increased use of AI-powered tools by state-affiliated actors—often with embedded backdoor, more supply chain attacks on open-source projects, and a surge in malware development using Go and C++.
Each year, as part of the Kaspersky Security Bulletin, GReAT offers in-depth insights into the most sophisticated APT activity and evolving threat trends. With its monitoring of over 900 APT groups and operations worldwide, the team provides a roadmap for organizations and cybersecurity professionals to prepare for the year ahead.
In 2024, cybercriminals and APT groups have increasingly leveraged AI for more convincing attacks. The Lazarus Group, for instance, used AI-generated images to exploit a Chrome zero-day vulnerability and steal cryptocurrency.
Another concerning trend involves APT groups distributing backdoored versions of AI models. They may target popular open-source AI models and datasets, embedding malicious code or introducing subtle biases that are difficult to detect but widely disseminated. GReAT experts suggest LLMs will become standard tools for reconnaissance, automating vulnerability detection, and generating malicious scripts to enhance attack success rates.
“AI is a double-edged sword – while cybercriminals use it to enhance their attacks, defenders can harness its power to detect threats faster, and strengthen security protocols. However, cybersecurity experts must approach this powerful tool with caution, ensuring that its use doesn’t inadvertently open new avenues for exploitation,” comments Maher Yamout, Lead Security Researcher at Kaspersky’s GReAT.
Experts also anticipate that APT groups will increasingly adopt deepfake technology to impersonate key individuals. This could involve creating highly convincing messages or videos to deceive employees, steal sensitive information, or execute other malicious actions.
Some advanced threat predictions for 2025 coming up with the infamous XZ case highlighted a significant issue, this incident has heightened awareness within the cybersecurity community and prompted organizations to enhance monitoring of open-source ecosystems. While the frequency of such attacks may not increase dramatically, the number of ongoing attacks being discovered is likely to rise as detection efforts improve.
