CrowdStrike's 2025 Global Threat Report: China's Cyber Espionage Surges Amid Rising AI-Driven Threats
6 Sources
[1]
Five Big Takeaways From CrowdStrike's 2025 Threat Report
Cyberattacks attributed to China's government are soaring while threats powered by GenAI and manually executed hacking are growing rapidly as well, according to the cybersecurity giant. Cyberattacks attributed to China's government are soaring while threats powered by GenAI and manually executed
[2]
China's Cyber Attacks Increase by 150% as AI Driven Threats Escalate: CrowdStrike
Tracking more than 250 named adversaries and 140 emerging activity clusters, CrowdStrike's latest research reveals: · China's Cyber Espionage Grows More Aggressive: CrowdStrike identified seven new China-nexus adversaries in 2024, fueling a 150% surge in espionage attacks, with critical industries
[3]
2025 CrowdStrike Global Threat Report: China's Cyber Espionage Surges 150% with Increasingly Aggressive Tactics, Weaponization of AI-powered Deception Rises
The industry's preeminent source on adversary intelligence exposes a 442% increase in vishing as GenAI-driven social engineering attacks increase; DPRK insider threats spike CrowdStrike (NASDAQ: CRWD) today released its 2025 Global Threat Report, exposing the growing aggression of China's cyber
[4]
Will Chinese cyberespionage be more aggressive in 2025? CrowdStrike thinks so
Chinese state-sponsored actors have increased activities, report claims We're still in the early days of 2025, but CrowdStrike's Global Threat Report has laid out what cybersecurity teams should expect for the coming year. The latter half of 2024 saw the vulnerability threat landscape evolve, with
[5]
CrowdStrike report finds surge in malware-free cyberattacks and AI-driven threats in 2024 - SiliconANGLE
CrowdStrike report finds surge in malware-free cyberattacks and AI-driven threats in 2024 A new report out today from CrowdStrike Holdings Inc. highlights how cyberthreats evolved significantly in 2024, with attackers shifting toward malware-free intrusions, artificial intelligence-assisted social
[6]
China cyber espionage up by 150 percent in 2024: Report
China's cyber espionage operations continue to become more aggressive amid the increasing use of emerging technologies like artificial intelligence to help carry out attacks, according to a report published Thursday. CrowdStrike's 2025 Global Threat Report, released Thursday, found China-linked
Share
Copy Link
CrowdStrike's latest report reveals a 150% increase in China-linked cyberattacks and a significant rise in AI-powered threats, highlighting evolving cybersecurity challenges for 2025.
China's Cyber Espionage Escalates Dramatically
CrowdStrike's 2025 Global Threat Report has revealed a startling 150% surge in cyberattacks attributed to China-nexus adversaries compared to the previous year
1
2
3
. This significant increase has particularly impacted critical sectors, with financial services, media, manufacturing, and industrial sectors experiencing a staggering 200% to 300% spike in targeted attacks1
3
.Adam Meyers, head of counter adversary operations at CrowdStrike, emphasized the gravity of the situation, stating, "China is, I think, the story that everybody needs to be focused on right now"
1
. The report identified seven new China-nexus adversaries in 2024, indicating an expansion of China's cyber capabilities2
3
.AI-Powered Threats on the Rise
The report highlights a dramatic increase in AI-driven cyber threats, particularly in social engineering attacks. Voice phishing (vishing) attacks saw a 442% increase in the second half of 2024 compared to the first half
1
2
3
. This surge is attributed to the growing use of generative AI in creating more convincing and sophisticated phishing attempts4
.Iran-based threat groups have been particularly aggressive in utilizing AI for vulnerability research and exploit development, aligning with government-led AI initiatives
2
3
. The adoption of AI has significantly lowered the barrier to entry for conducting effective cyberattacks1
4
.Shift to Malware-Free and Identity-Based Attacks
A notable trend in 2024 was the shift towards malware-free attacks, with 79% of detected intrusions not involving malware
1
2
3
5
. This shift makes attacks harder to detect as they often appear as legitimate user activities. Concurrently, there was a 50% year-over-year increase in access broker advertisements, facilitating the sale of compromised credentials2
3
5
.Cloud Environments Under Increased Threat
The report indicates a 26% year-over-year increase in new and unattributed cloud intrusions
1
2
3
. Valid account abuse emerged as the primary initial access tactic, accounting for 35% of cloud incidents in the first half of 20242
3
. This trend underscores the growing vulnerability of cloud environments to sophisticated cyber threats.Related Stories
Record-Breaking Attack Speeds
CrowdStrike reported a significant decrease in the average "breakout time" – the time it takes for an attacker to move laterally within a compromised network. The average eCrime breakout time dropped to just 48 minutes, with the fastest recorded at a mere 51 seconds
2
3
5
. This rapid progression leaves defenders with very little time to react and contain threats.Recommendations for Enhanced Cybersecurity
In light of these evolving threats, CrowdStrike recommends several key strategies:
- Strengthen identity security through phishing-resistant multi-factor authentication and continuous monitoring of privileged accounts
5
. - Implement real-time AI-driven threat detection for rapid response to fast-moving attacks
5
. - Fortify cloud security by enforcing least privilege access and monitoring API keys for unauthorized usage
5
. - Adopt advanced behavioral analytics and cross-domain visibility solutions to detect stealthy intrusions
5
.
As Adam Meyers concludes, "Stopping breaches requires a unified platform powered by real-time intelligence and threat hunting, correlating identity, cloud and endpoint activity to eliminate the blind spots where adversaries hide"
3
. The report serves as a crucial wake-up call for organizations to reassess and strengthen their cybersecurity measures in the face of increasingly sophisticated and AI-driven threats.References
Summarized by
Navi
Related Stories
CrowdStrike 2026 Report: AI Cyberattacks Explode as Hackers Exploit Vulnerabilities in 24 Hours
31 Jul 2026•Technology
China behind 58% of state-backed cyberattacks targeting US AI tech, CrowdStrike warns
10 Jun 2026•Policy and Regulation
CrowdStrike reports 89% surge in AI-driven cyberattacks as breakout times collapse to 29 minutes
25 Feb 2026•Technology
Recent Highlights
1
AI Hallucination Nearly Sparked US Military Confrontation With Chinese Ship in Middle East
Technology
2
Google Gemini Hacked Three Real Companies During Cybersecurity Testing, Raising AI Safety Concerns
Technology
3
OpenAI Claims AI Breakthrough on Navier-Stokes Problem, Sparking Math Community Crisis
Science and Research
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
