Ransomware 2025: Alert for attacks every 6 minutes

Cyberpeace Tech
May 27
2 min read

Ransomware continues to position itself as one of the most dangerous digital threats of 2025. This technique, which consists of kidnapping information in exchange for payment, already represents an alarming percentage of the total number of attacks registered worldwide.

In Spain, it has been detected that every six minutes a company suffers an attack of this type.

Although this figure comes from Europe, it serves as a warning for countries such as Mexico, where the growth of this crime is also on the rise.

Artificial intelligence: a double-edged sword

The use of artificial intelligence has completely changed the rules of the game. Attackers now leverage generative models to create malware, craft more convincing phishing emails and find vulnerabilities in record time. This has resulted in ransomware campaigns that are much more sophisticated and harder to detect.

On the other hand, defenders are also using AI to automate responses, detect unusual behavior and anticipate threats.

The difference between being victimized or protected lies in who acts faster.

Ransomware 2025: key challenges for Latin America

In the context of Latin America, including Mexico, the outlook is increasingly challenging. Sectors such as healthcare, finance and industry are the most exposed, due to the value of the data they handle and their need to operate without interruption.

The situation in Spain can be taken as a direct warning. Preparedness must start now, and the approach must be comprehensive.

What to expect for the rest of 2025

Specialists agree that the second half of 2025 will be even more aggressive in terms of cyberattacks. Factors such as geopolitical conflicts, the use of ransomware as a service (RaaS) and the advancement of generative AI are driving a new wave of threats.

Attacks are expected to be more targeted, silent and with greater economic demands.

5 essential pillars for dealing with ransomware

In an environment where being attacked is almost inevitable, organizations should focus on reducing the impact as much as possible. These are the most recommended measures:

Perform frequent, segmented and verified backups.
Implement endpoint detection and response systems (EDR/XDR).
Assess vulnerabilities and perform regular penetration tests.
Train personnel in digital hygiene and prevention.
Have well-defined and tested incident response plans.

Preparedness is key: Mexico cannot wait

Simply put: ransomware is no longer a possibility, it is a certainty. Therefore, the best defense is not to wait for an attack, but to be ready to act quickly, minimize damage and ensure operational continuity.

Mexico must learn from the global context, adopt preventive tools and strengthen the cyber resilience of companies and public institutions before the impact is greater.

At Cyberpeace, we recommend staying informed about cybersecurity issues and other digital threats. Prevention and knowledge are your best allies to protect your online identity. Interested in learning more about cybersecurity and digital privacy? Follow our networks and stay informed.