Emerging Malware, Ransomware, and Threat Groups: Trends & TTPs (November 2025)

The November 2025 Threat Report reveals a significant escalation in cyber aggression, highlighting the emergence of “White Lock” and “Beast” ransomware—new strains that are actively targeting enterprise environments with advanced evasion techniques. This month’s intelligence also dissects the Qilin group’s shift to a quadruple extortion model, which now combines encryption with legal threats and aggressive reputational coercion. Furthermore, the report details the resurgence of the “Stealerium” information stealer and the rise of mobile-specific threats like the “BTMOB RAT,” underscoring the urgent need for cross-platform visibility and behavioral analytics to counter these coordinated, AI-enhanced attacks.

Stay Ahead of the Latest Attacks: Download the Full November 2025 Threat Report.

 

Emerging Malware, Ransomware, and
Threat Groups Report

SISA’s Latest
close slider