India’s Cyber Risk Profile Intensifies with AI-Driven Threats

• India ranks 2^ndglobally in email threats, contributing 9% to global detections and nearly 24% to Asia’s total
• India holds 3^rdplace globally in malware detections, responsible for 74% of all global threats
• Banking, Financial Services, and Governmentsectors remain the most targeted in India

Mumbai, June 10, 2025: Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global cybersecurity leader has released its Trend 2025 Cyber Risk Report, offering insights about India’s vulnerability in the face of evolving cyber threats. Findings reveal that India remains one of the most targeted countries globally across all threat vectors, particularly vulnerable to email and malware threats. The report looks at Trend Micro’s telemetry from 2024 to recognize exposures and understand attacker behaviour, enabling the implementation of countermeasures for the year ahead and transforming security from a challenge into a catalyst for innovation and business growth.

Email Threats: India’s Most Pressing Cybersecurity Concern

Email remains the top attack vector globally, with over 1.49 trillion threats detected. India alone contributed 6.9% of these incidents, underscoring the scale of the challenge. Within Asia, India was responsible for a staggering 23.92% of email-based threats, and a dominant 90.78% in Southern Asia, making it the primary hotspot in the region. In absolute numbers, India recorded over 1.03 billion email threats, reflecting its exposure across industries and the urgent need for improved email security infrastructure.

Malware and Ransomware Continue to Threaten Indian Enterprises

India remains a top target for cyber threats, ranking 3rd globally and 2nd in Asia with 19.3 million malware detections—accounting for 4.74% of global activity. The Banking, Financial Services, and Government sectors were most impacted, frequently targeted by malware families such as CoinMiner, FakeMS, and Mudyupdate.

With India accounting for 3.36% of global ransomware detections and a staggering 77.68% within Southern Asia, ransomware also remains a major concern in the region. In 2024 alone, 209,000 ransomware incidents were reported, with WannaCry (WCRY) being the most frequently observed variant. The continued success of such older threats points to ongoing gaps in patching and endpoint security across organizations.

Commenting on these findings, Sharda Tickoo, Country Manager for India & SAARC, Trend Micro, said: “India’s growing digital footprint makes it an attractive target for cybercriminals. From ransomware and malware to email threats, attackers are becoming more persistent and adaptive. With AI transforming the threat landscape, it’s crucial that businesses in India recognize the dual-edged nature of these technologies. Now is the time for proactive, intelligence-driven cybersecurity that goes beyond basic defenses.”

In addition to India-specific insights, the report offers a global perspective talking about notable uses of AI in cybercrime along with some notable APT campaigns. Some other key global highlights include:

• AI-driven exploitation and deception: Threat actors are using generative AI for disinformation campaigns, phishing, and scams like pig butchering and virtual kidnapping. Deepfakes and malicious digital twins make these attacks more convincing and harder to detect. However, AI can also empower network defenders to better predict and prevent cyberattacks, such as via the industry-first security LLM Trend Cybertron.
• LLM and rogue AI risks:The OWASP Top 10 for LLMs that identifies the most critical web application security risks highlights vulnerabilities such as embedding weaknesses and misinformation. Rogue AI threats also arise from attacker manipulation, human error, or tech limitations.
• Enhanced post-breach tactics:AI enables faster, large-scale reconnaissance by automating data extraction and analysis, helping cybercriminals identify victims and escalate attacks more efficiently.

Global & Regional Threat Patterns

• Globally, email threats surged past 49 trillion, ransomware reached 6.23 million, and malware detections crossed 407 million
• Asiawitnessed over 430 billion email threats, with India contributing nearly a quarter
• In Southern Asia, India dominated in all categories: 78% of email threats, 93.82% of malware, and 77.68% of ransomware
• Organisations that adopted proactive security measures are achieving measurable reductions in cyber risk, recording an average score of 38.4 for the year on the Cyber Risk Index (CRI)*, a 6.2-point drop from 2023

To lower Cyber Risk Index, Trend Micro urges organizations to

• Optimize security settingsto maximize product features and get alerts on misconfigurations, vulnerabilities, and other risks. And leveraging native sensors/third-party sources to build a comprehensive view of the attack surface.
• Contact the device and/or account ownerwhen a risky event has been detected to verify and investigate using the Trend Vision One^TM Workbench search function.
• Conduct an inventory of stale accountsto delete inactive and unused ones, disabling risky accounts, resetting passwords with strong credentials, and enabling multi-factor authentication (MFA).
• Apply the latest patchesor upgrading application/OS versions regularly

To read the Trend 2025 Cyber Risk Report, please visit: https://www.trendmicro.com/vinfo/in/security/news/threat-landscape/trend-2025-cyber-risk-report

*Trend Vision One^TM Cyber Risk Exposure Management uses its risk event catalog to formulate a risk score for each asset type and an index score for organizations. It does this by multiplying an asset’s attack, exposure, and security configuration by asset criticality. The result is an integer between zero and 100 that falls into one of three levels: Low Risk (0-30), Medium Risk (31-69) and High Risk (70-100).

About Trend Micro

Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro’s AI-powered cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, Trend’s platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 70 countries, Trend Micro enables organizations to simplify and secure their connected world. www.TrendMicro.com