Over 40% of malware detected in 2024 was newly observed.

Top concerns for CIOs regarding cybersecurity risk include: Malware and ransomware (42%), data breaches (37%), AI-driven attacks (34%), and phishing (33%).

FortiGuard Labs observed a 500% increase in the past year in logs available from systems compromised by infostealer malware.

Despite regularly experiencing malware and phishing incidents, 90% of respondents expressed confidence in their organizations' security measures.

"More than half" of the organizations surveyed confirmed they regularly experienced malware and phishing incidents.

"More than half" of the organizations surveyed confirmed they regularly experienced malware and phishing incidents.

The FBI received 441 complaints about malware in 2024 (versus 659 in 2023 and 762 in 2022).

The most common attack vectors cited were: Data breaches (30%), Malware on devices (29%), Cloud or SaaS breaches (28%), Phishing (28%), and Insider threats (28%).

Extortion following a ransom demand occurred in 12% of cases.

Ransomware made up 28% of malware cases in 2024.

The deployment of malware was the most observed action on objectives, making up 42% of cases.

X-Force observed a decline in ransomware incidents overall for the third year.

Ransomware comprises nearly one-third (28%) of malware incident response cases and 11% of security cases.

Of all the malware cases, 28% involved ransomware, followed by backdoors and webshells, at 20% and 13% respectively.

The vast majority of malware discoveries were classified as trojan malware, followed by surveillanceware and adware.

427,000 malicious apps were detected on enterprise devices.

Nearly one in two corporate users were already the victim of a malware infection in 2024.

Endpoint Detection and Antivirus Solutions miss 66% of malware infections.

An average of 1,861 cookies were harvested per malware infection.

SpyCloud's research shows that 66% of malware infections occur on devices with endpoint security solutions installed.