FAMOUS CHOLLIMA activity more than doubled.

DPRK-linked incidents rose by more than 130%.

PRESSURE CHOLLIMA stole $1.46 billion in cryptocurrency, the largest single financial heist ever reported.

Targeting of the logistics vertical by China-nexus actors increased by 85%.

State-nexus threat actors increased targeting of cloud environments for intelligence collection by 266%.

China-nexus activity increased by 38% in 2025.

67% of exploited vulnerabilities used by China-nexus actors delivered immediate system access.