01 Jan NordVPN reveals cybersecurity threat predictions for 2025

Cybersecurity experts at NordVPN have examined discussions occurring within dark web forums to predict emerging threats for 2025.

In collaboration with NordStellar analytics, they analysed the most prominent topics being discussed.

The key issues identified include advanced disinformation services, stolen digital identities, vulnerabilities in smart home technology, and AI-driven social engineering.

Adrianus Warmenhoven, a cybersecurity expert at NordVPN, said: “While last year’s predictions still hold relevance, we’ve seen a noticeable increase in the popularity of hacking courses and DIY cybercrime kits. Leaked personal media and customer data are continuing to circulate widely in these forums.” This year, the team has gone deeper in their analysis, identifying five new threats and vulnerabilities that are likely to rise in prominence by 2025.

The expansion of account takeovers

One of the most discussed topics on the dark web, with over 135,000 comments, revolves around ‘combo lists’-databases containing combinations of usernames, passwords, and other personal information obtained from various breaches.

Another popular topic, which has garnered nearly 26,000 comments, centers on account takeovers that exploit this metadata for unauthorised access.

Warmenhoven predicts that such activities will see an increase in 2025 as new data breaches continue to provide criminals with fresh credentials.

Exploiting smart home security

“Hackers are increasingly targeting a wide range of smart home devices, from security systems to everyday appliances like smart refrigerators and vacuums. Some devices may serve as gateways for larger network attacks, while others, such as home CCTV systems, can be hacked directly, potentially exposing private activities,” warns Warmenhoven.

Identity theft

“Identity theft is evolving, and we anticipate new forms will emerge next year,” said Warmenhoven. “One such form is synthetic identity fraud, which merges real and fake data and often incorporates deepfake technologies to enhance effectiveness. Another developing method is reverse identity theft, where individuals use someone else’s identity not for financial gain but to impersonate them in daily life—securing jobs, accessing medical care, or evading legal consequences. These strategies focus on long-term impersonation rather than immediate financial benefits.”

The rise of disinformation as a service

“Based on current dark web trends, we anticipate that disinformation as a service will emerge as a significant threat next year,” warns Warmenhoven.

“This service, offered by cybercriminals, profits from creating and spreading false information. It allows for highly customizable and adaptive campaigns that can precisely target demographic profiles and manipulate social media algorithms to maximise impact.”