Over 40% of malware detected in 2024 was newly observed.

Top concerns for CIOs regarding cybersecurity risk include: Malware and ransomware (42%), data breaches (37%), AI-driven attacks (34%), and phishing (33%).

FortiGuard Labs observed a 500% increase in the past year in logs available from systems compromised by infostealer malware.

Despite regularly experiencing malware and phishing incidents, 90% of respondents expressed confidence in their organizations' security measures.

"More than half" of the organizations surveyed confirmed they regularly experienced malware and phishing incidents.

"More than half" of the organizations surveyed confirmed they regularly experienced malware and phishing incidents.

The FBI received 441 complaints about malware in 2024 (versus 659 in 2023 and 762 in 2022).

The most common attack vectors cited were: Data breaches (30%), Malware on devices (29%), Cloud or SaaS breaches (28%), Phishing (28%), and Insider threats (28%).

Extortion following a ransom demand occurred in 12% of cases.

X-Force observed a decline in ransomware incidents overall for the third year.

The deployment of malware was the most observed action on objectives, making up 42% of cases.

Of all the malware cases, 28% involved ransomware, followed by backdoors and webshells, at 20% and 13% respectively.

Ransomware comprises nearly one-third (28%) of malware incident response cases and 11% of security cases.

Ransomware made up 28% of malware cases in 2024.

427,000 malicious apps were detected on enterprise devices.

The vast majority of malware discoveries were classified as trojan malware, followed by surveillanceware and adware.

Endpoint Detection and Antivirus Solutions miss 66% of malware infections.

Nearly one in two corporate users were already the victim of a malware infection in 2024.

In the year prior to 2024, malware was the cause of 61% of all breaches.

There was an average of 44 exposed credentials per malware infection.