EXECUTIVE SUMMARY
2024 SonicWall Mid-Year Cyber Threat Report | Executive Summary
ACTIONABLE INSIGHTS FOR EVOLVING THREATS
2024 Mid-Year Cyber
Threat Report
Our sensors detected 50 hours worth of critical
attacks in a 40-hour work week. You read that right -
our average firewall was under attack 125% during a
40-hour work week.
Organizations were saved from a potential 46
days of downtime in the first five months of 2024.
At a minimum, 12.6% of all revenues are
exposed to cyber threats without proper
protection. For a $10 million company that
equates to $1.2 million.
THREAT LANDSCAPE
125%
12.6%
46DAYS
2024 SonicWall Mid-Year Cyber Threat Report | Executive Summary
ACTIONABLE INSIGHTS FOR EVOLVING THREATS
2024 Mid-Year Cyber
Threat Report
Our sensors detected 50 hours worth of critical
attacks in a 40-hour work week. You read that right -
our average firewall was under attack 125% during a
40-hour work week.
Organizations were saved from a potential 46
days of downtime in the first five months of 2024.
At a minimum, 12.6% of all revenues are
exposed to cyber threats without proper
protection. For a $10 million company that
equates to $1.2 million.
THREAT LANDSCAPE
125%
12.6%
46DAYS
2024 SonicWall Mid-Year Cyber Threat Report | Executive Summary
Ransomware is on the rise
in the Americas (NOAM:
15%, LATAM: 51%). EMEA,
however, is pulling the global
numbers down, logging a
-49% suggesting improved
cybersecurity measures and
law enforcement interventions
are having a positive impact.
RANSOMWARE
60K
40K
20K
0
Jan Feb Mar Apr May
68,034
50,195
45,009
44,669
45,711
49,899
48,732
56,701
49,329
54,941
Volume
2023 2024
Global Ransomware Volume
www.sonicwall.com
Malware trended up
from March to May,
seeing a massive 92%
increase in May alone.
15% of all malware are
leveraging software
packing as the
primary MITRE TTP.
MALWARE
15%
30%
Attacked IoT devices
spent an average of 52.8
hours under attack.
IoT MALWARE
107%
Encrypted threats jumped 92%, which showcases
growing sophistication from cybercriminals and
the fact that they continue to increasingly utilize
TLS-encrypted transfers to deliver malware and
other threats over the network.
ENCRYPTED THREATS
92%
Ransomware is on the rise
in the Americas (NOAM:
15%, LATAM: 51%). EMEA,
however, is pulling the global
numbers down, logging a
-49% suggesting improved
cybersecurity measures and
law enforcement interventions
are having a positive impact.
RANSOMWARE
60K
40K
20K
0
Jan Feb Mar Apr May
68,034
50,195
45,009
44,669
45,711
49,899
48,732
56,701
49,329
54,941
Volume
2023 2024
Global Ransomware Volume
www.sonicwall.com
Malware trended up
from March to May,
seeing a massive 92%
increase in May alone.
15% of all malware are
leveraging software
packing as the
primary MITRE TTP.
MALWARE
15%
30%
Attacked IoT devices
spent an average of 52.8
hours under attack.
IoT MALWARE
107%
Encrypted threats jumped 92%, which showcases
growing sophistication from cybercriminals and
the fact that they continue to increasingly utilize
TLS-encrypted transfers to deliver malware and
other threats over the network.
ENCRYPTED THREATS
92%
SonicWall, Inc.
1033 McCarthy Boulevard | Milpitas, CA 95035
© 2024 SonicWall Inc. ALL RIGHTS RESERVED.
SonicWall is a trademark or registered trademark of SonicWall Inc. and/or its affiliates in the U.S. and/or other countries. All other trademarks and registered trademarks are property of their
respective owners. The information in this document is provided in connection with SonicWall Inc. and/or its affiliates’ products. No license, express or implied, by estoppel or otherwise, to any
intellectual property right is granted by this document or in connection with the sale of SonicWall products.
As a best practice, SonicWall routinely optimizes its methodologies for data collection, analysis and reporting. This includes improvements to data
cleansing, changes in data sources and consolidation of threat feeds. Figures published in previous reports may have been adjusted across different time
periods, regions or industries.
DOWNLOAD THE REPORT
Eighty-three percent of
customer-received alerts from
our managed services team
are related to cloud apps and
compromised credentials.
SOC
83%
SonicWall Capture Advanced Threat Protection (ATP)
with Real-Time Deep Memory Inspection (RTDMI â„¢)
recorded 78,923 new variants.
RTDMIâ„¢
— NEW VARIANTS —
526
A DAY
After a record-breaking year,
Cryptojacking dropped 60%. Most
of the globe saw a decrease with
the exception of India who saw a
staggering 409% increase.
CRYPTOJACKING
60%
1033 McCarthy Boulevard | Milpitas, CA 95035
© 2024 SonicWall Inc. ALL RIGHTS RESERVED.
SonicWall is a trademark or registered trademark of SonicWall Inc. and/or its affiliates in the U.S. and/or other countries. All other trademarks and registered trademarks are property of their
respective owners. The information in this document is provided in connection with SonicWall Inc. and/or its affiliates’ products. No license, express or implied, by estoppel or otherwise, to any
intellectual property right is granted by this document or in connection with the sale of SonicWall products.
As a best practice, SonicWall routinely optimizes its methodologies for data collection, analysis and reporting. This includes improvements to data
cleansing, changes in data sources and consolidation of threat feeds. Figures published in previous reports may have been adjusted across different time
periods, regions or industries.
DOWNLOAD THE REPORT
Eighty-three percent of
customer-received alerts from
our managed services team
are related to cloud apps and
compromised credentials.
SOC
83%
SonicWall Capture Advanced Threat Protection (ATP)
with Real-Time Deep Memory Inspection (RTDMI â„¢)
recorded 78,923 new variants.
RTDMIâ„¢
— NEW VARIANTS —
526
A DAY
After a record-breaking year,
Cryptojacking dropped 60%. Most
of the globe saw a decrease with
the exception of India who saw a
staggering 409% increase.
CRYPTOJACKING
60%
