Romania faces surge in cyberattacks and phishing in 2025

The National Cyber Security Directorate (DNSC) reported a significant surge in cyberattacks in Romania throughout 2025, noting over 25 million security events. The report characterizes the general threat level as “high,” with attackers increasingly targeting critical infrastructure, public institutions, and digital identities.

Phishing remains the primary attack vector, with incidents rising by 70.6% to 4,975 cases. These campaigns have become more sophisticated, utilizing artificial intelligence to produce grammatically correct messages and professional graphics that mimic banks and public institutions. Attackers are also diversifying delivery channels by using social media and messaging apps like WhatsApp.

Other notable increases include a 353% rise in account compromise incidents and a 153% increase in ransomware attacks. Fraud and attempted fraud incidents grew by 91%. The DNSC highlighted that ransomware affected 22 public institutions, 115 individuals, and 119 legal entities. The rise in account compromises is linked to social engineering tactics and poor security practices, such as password reuse and inadequate multi-factor authentication.