In today’s hyper-connected digital economy, a single breach can bring an entire business to a halt. The first half of 2025 has exposed just how vulnerable Philippine enterprises are, with 9 ransomware attacks already matching the total for all of 2024.
The country saw 3.7 million stolen credentials and 88 major breach incidents in just six months, with finance and e-commerce platforms falling to phishing scams and healthcare systems under siege via IoT devices as attacks grow more sophisticated and harder to detect.
Viettel Cyber Security, a trusted partner for global enterprises, highlights these growing threats in its 2025 Mid-Year Cyber Threat Landscape Report. Key findings are as follows:
-AI and deepfakes are fueling hyper-personalized automated phishing attacks.
-Deepfake voice and video are bypassing traditional verification systems.
-Ransomware-as-a-Service (RaaS)makes advanced attacks accessible to low-skill hackers.
-Fileless malware runs in memory and evades most antivirus defenses.
-Poorly secured IoT and blockchain platforms are opening new attack vectors.
Several sectors were hit especially hard in early 2025, with education leading at 18.2% as large databases and limited cybersecurity funding make schools easy targets. Government portals followed at 13.6%, often exploited to test new attack methods, while the Banking, Financial Services, and Insurance (BFSI) sector accounted for 6.8% of incidents, facing relentless credential theft and AI-driven phishing. Healthcare, e-commerce, media, and manufacturing were also heavily targeted due to their vast stores of sensitive data.
Serving as a roadmap for Filipino businesses to strengthen defenses in a volatile digital economy, PH businesses should start:
-Implementing data leak monitoring and adopting Zero Trust models
-Backing up critical systems to guard against ransomware
-Enforcing Third-Party Risk Management to secure supply chains
-Building a strong internal security culture
At the same time, Advanced Persistent Threats (APTs) are exploiting undiscovered software flaws to break into networks. Cybercriminal groups from Southeast Asia and Eastern Europe are expanding attacks through RaaS platforms, while blockchain tools are being used to hide their tracks.
Viettel Threat Intelligence (VCS-TI) offers expert guidance and early warning systems to help enterprises stay ahead of threats.
