Threat Report 2024

Report

Published July 2024

x

Gaining insights by studying severe incidents

This report focuses primarily on hundreds of digital forensics and incident response (DFIR) engagements conducted by the Arctic Wolf Incident Response team. The vast majority of these engagements were initiated as part of cyber insurance policies, through our partnerships with insurance providers and privacy law practitioners.

Consequently, these incidents typify cyber attacks that are so severe (i.e., damaging, disruptive) that they led to insurance claims — making them ideal study subjects in our aim to better understand the most dangerous threats. Ransomware (and data extortion) and business email compromise together account for nearly 80% of the incidents we investigated.