The top malware list for Latin America includes 3 RATs, 2 Botnets (FakeUpdates, Androxgh0st), and 1 Downloader (FakeUpdates).

The global weekly average for cyber attacks is 1,955.

Qilin saw an 85% increase in activity, making it the most active threat group in Q2 2025.

Black Kite researchers found that 31 out of 140 third-party vendors have at least one critical vulnerability with a CVSS at or above 8. 15 vendors show an extremely high risk with CVSS scores above 9.

There was a 23% decline in publicly reported ransomware incidents in Q2 2025, which may indicate changing attacker patterns beyond seasonal norms.

62% of malicious files in Latin America were delivered via email in the last 30 days.

The weekly attack rate in Latin America is 39% higher than the global weekly average of 1,955 attacks.

The healthcare sector dropped out of the top five most targeted industries by ransomware for the first time since Q2 2022.

Ransomware victim numbers remain elevated year-over-year (+43%).

Exploits were observed being weaponised in minutes.

90 third-party vendors are flagged with high-risk threat categories. Among these, 35 vendors are marked with Known Exploited Vulnerabilities (KEV) tags.

Industries facing the highest number of attacks in Latin America include government/military, healthcare, and communications, with weekly incidents ranging from over 3,800 to nearly 4,200.

There were 191 disclosed ransomware victims in the financial sector in 2023.

The number of active ransomware groups climbed from 45 in Q2 2024 to 71 in Q2 2025.

Latin America is experiencing an average of 2,716 cyber attacks per week in the first half of 2025.

Information disclosure is the most common vulnerability exploit type in Latin America, impacting 75% of organisations.

Cl0p claimed responsibility for targeting companies using unpatched versions of Cleo's MFT products in December 2024.

Nearly one-third (26.6%) of finance threat actors are attributed to "Other", which includes emerging or short-lived groups, highlighting a more fragmented and unpredictable ransomware landscape.

Infostealer malware attacks have surged by 58% in Latin America.

52% of observed ransomware victims in Q2 2025 were based in The United States.