Q1 2025 Quarterly Threat Report
Uncover the latest bot threats, fraud trends, and automated attack tactics. Learn what’s happening in the criminal underground and how to stay ahead.
Q1 2025
Quarterly Threat Report
Automated threats are growing smarter, faster, and more difficult to detect. Kasada's Quarterly Threat Report reveals what to watch for and what to do next — powered by millions of real-time signals analyzed through KasadaIQ.

Key Findings
Stolen Accounts Dominate Criminal Marketplaces
KasadaIQ identified stolen accounts as the leading category on criminal marketplaces in Q1 2025, with 2.5 million available for purchase.
"Reverse Robinhood" Fraud Ring Targeted Welfare Recipients
Adversary spotlight on ALTSRUS, a prolific fraud group involved in stealing and selling accounts linked to Electronic Benefit Transfer (EBT) cards and pharmacy prescriptions.
CAPTCHAs Failed to Stop Bots (Again)
The use of CAPTCHA solver services is on the rise, enabling threat actors to scale account takeovers and fake account generation.
Powered by KasadaIQ
Read the Full Report
Use the embedded viewer or download below.
More reports

Q2 2026 Threat Intelligence Report
Explore the Q2 2026 threat intelligence landscape: AI-accelerated fraud, credential markets, and adversary economics — and how our 2026 predictions are tracking
Read more
Total economic impact of Kasada
Before Kasada, each organization in the study had a legacy CDN bot management solution. All of them had the same problem: their tool was telling them they were protected. They weren’t.
Read more