Class 01 · KP 05 / 25

The 2024—2026 Threat Landscape

Each attack technique provoked a defense; each defense provoked a new attack.

Malware is now an industry with supply chains, subscriptions, and specialization.

Ransomware-as-a-Service (RaaS): affiliates rent the toolkit; operators take a cut.
Infostealers: mass credential and cookie theft feeding the access economy.
Supply-chain attacks: compromise one vendor, reach thousands downstream.
Living-off-the-land (LOLBins) and fileless: abuse trusted OS tools, stay in memory.
Loaders and Malware-as-a-Service: pay-per-install delivery pipelines.
Nation-state APTs: patient, targeted, well-resourced intrusion campaigns.