Data Leakage and Ransomware Extortion Tactics

The days of automated cyberattacks are dwindling: last year CrowdStrike saw a 60% jump in interactive intrusions, a type of attack in which a human is on the other side, working to break in and navigating their target environment as soon as they gain access. Most (75% of) attacks in 2023 didn’t involve malware at all — in nearly all cases, the adversary relied on identity-related techniques or exploited an unmanaged device.   The threat landscape is constantly evolving as adversaries explore new tactics. And as the CrowdStrike 2024 Global Threat Report shows, a lot can change in a year. We’re seeing more adversaries, operating at greater speed and conducting more attacks than ever.   In this episode, Adam and Cristian reflect on the early days of the Global Threat Report and examine the key findings of this year’s report. Highlights include:

• 62 minutes: The average time an adversary needs to move from an initial access point to another host in the target environment
• 232: The number of adversaries CrowdStrike tracks
• 75%: The year-over-year increase in attacks targeting cloud environments
• 76% increase in postings on data leak sites

Download your copy of the CrowdStrike 2024 Global Threat Report today at crowdstrike.com/global-threat-report