2 min read
Pakistan witnessed over 5.3 million cyberattacks in just the first three quarters of 2025, according to a new report by cybersecurity giant Kaspersky, highlighting a rapid surge in ransomware, malware, and targeted APT operations.
Globally, cyberattacks have also hit record highs as threat actors expand operations across financial systems, telecom, government networks, and consumer devices.
- Cybersecurity incidents have been escalating worldwide:
- Global ransomware attacks surged by nearly 80% between 2023 and 2024.
- Over 1 billion malware attacks were recorded globally in 2024, showing a sharp increase from 2023.
Critical sectors such as energy, aviation, banking, and healthcare reported severe intrusions from organized cybercrime groups and state-backed attackers.
Experts say Pakistan, like many developing countries, is facing the impact of this global wave due to outdated infrastructure, low cybersecurity awareness, and expanding digital usage.
Pakistan’s 2023–2024 Cyberattack Trends
Kaspersky data and industry reports reveal Pakistan has been steadily targeted over the last two years:
- 2023: Pakistan faced around 3.2 million cyberattacks, largely driven by banking malware and phishing scams.
- 2024: The number rose sharply to 4.7 million attacks, with a notable spike in ransomware and APT campaigns targeting telecom, government, and energy sectors.
This consistent rise has now peaked with the 5.3 million attacks in 2025, confirming a disturbing upward trend.
Kaspersky’s 2025 Report
Kaspersky’s latest findings reveal:
- 27% of Pakistani users and 24% of companies encountered malware through USB devices, CDs, and hidden installers.
- 2.5 million+ web-based attacks were blocked nationwide.
- Attack types included phishing, browser exploits, botnets, and spoofed Wi-Fi networks.
Notable figures:
- 354,000 exploitation attempts blocked
- 166,000 banking malware detections
- 42,000 ransomware incidents reported
APT (Advanced Persistent Threat) Activity
A number of high-level APT groups targeted Pakistan:
- The Mysterious Elephant campaign focused on stealing documents, images, messaging data (including WhatsApp), and system information.
- Attackers used spear-phishing emails, exploit kits, and post-intrusion malware to infiltrate networks.
A Kaspersky analyst noted,
“The increasing sophistication of cybercriminals demands stronger security practices and vigilance across all sectors in Pakistan.”
What Experts Recommend
Kaspersky urged both users and organizations to take immediate precautions:
For individuals:
- Keep systems updated
- Use trusted antivirus/security tools
- Regularly back up important data
- Avoid suspicious links, USB drives, and apps
For organizations:
- Deploy modern EDR (Endpoint Detection & Response) tools
- Schedule regular IT security assessments
- Implement employee cybersecurity training
- Use advanced threat intelligence for early detection
