--- title: Ransomware, phishing and software vulnerabilities created the most havoc in H2 2023 description: "The “Acronis Cyberthreats Report, H2 2023: Alarming rise in cyberattacks, SMBs and MSPs in the crosshairs” is generated by Acronis data based on over 1,000,000 unique endpoints distributed around the world, focusing on 15 key countries. It explores the cyberattack trends and statistics that dominated H2 2023." canonical_url: https://www.acronis.com/en/blog/posts/ransomware-and-software-vulnerabilities-created-the-most-havoc-in-h2-2023/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Ransomware, phishing and software vulnerabilities created the most havoc in H2 2023 The “Acronis Cyberthreats Report, H2 2023: Alarming rise in cyberattacks, SMBs and MSPs in the crosshairs” is generated by Acronis data based on over 1,000,000 unique endpoints distributed around the world, focusing on 15 key countries. It explores the cyberattack trends and statistics that dominated H2 2023. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: Allison Ho](https://staticfiles.acronis.com/images/content/4001b7fac80a9a9ed6a3a01dec591360.png)](https://www.acronis.com/en/blog/authors/allison-ho/ "Allison Ho") [Allison Ho,](https://www.acronis.com/en/blog/authors/allison-ho/)Content Marketing Manager 3 min read Last updated 07 February 2024 Other languages available:[Deutsch](https://www.acronis.com/de/blog/posts/ransomware-and-software-vulnerabilities-created-the-most-havoc-in-h2-2023/) [Español](https://www.acronis.com/es/blog/posts/ransomware-and-software-vulnerabilities-created-the-most-havoc-in-h2-2023/) [Français](https://www.acronis.com/fr/blog/posts/ransomware-and-software-vulnerabilities-created-the-most-havoc-in-h2-2023/) [Italiano](https://www.acronis.com/it/blog/posts/ransomware-and-software-vulnerabilities-created-the-most-havoc-in-h2-2023/) Cyberattacks affect businesses of all sizes and in all industries. And although attacks on enterprises generate the most headlines because of household names and sky-high ransomware costs, attacks on SMBs are equally damaging. When MSPs are attacked, their clients are often next in line, making them vulnerable not only to lost business but also potential legal ramifications. Together, this makes SMBs and MSPs prime targets for attack. Our latest report explores this and more. The “Acronis Cyberthreats Report, H2 2023: Alarming rise in cyberattacks, SMBs and MSPs in the crosshairs” is generated by Acronis data based on over 1,000,000 unique endpoints distributed around the world, focusing on 15 key countries. It explores the cyberattack trends and statistics that dominated H2 2023. From software vulnerabilities to ransomware, cyberthreats in the second half of 2023 revealed a startling level of sophistication that will only grow with the availability of free and open source AI tools. **Highlights from the report:** · Attack techniques cybercriminals used to evade defenses. · The top 10 countries targeted in malware, phishing and ransomware attacks. · Software vulnerabilities that kept IT on its feet in H2 2023. · How cybercriminals turned the tables on AI. · Cybersecurity predictions for 2024. Here are a few riveting cyberthreat trends we've observed in the second half of 2023: **Phishing and AI are a toxic pair** Email attacks skyrocketed by 222% compared to the last half of 2022, and generative artificial intelligence (AI) is partially to blame. A growing number of organizations faced AI-enhanced phishing attacks, with 91.1% of businesses reporting first-hand encounters. With adversaries abusing generative AI to craft phishing emails, messages are more convincing and virtually indistinguishable from legitimate messages, making it more crucial now than ever for SMBs and MSPs to deploy AI-powered detection tools. ![Image 3: Ransomware, phishing and software vulnerabilities created the most havoc in H2 2023](https://staticfiles.acronis.com/images/content/972160fcf9751d5e95508ee8482480ba.png) ## 5 ransomware gangs claimed the majority of reported victims LockBit, CL0P, BlackCat / ALPHV, Play and 8Base claimed the most victims in H2 2023, hitting organizations across manufacturing, healthcare, education, finance and government. In December 2023, the FBI and other law enforcement agencies breached ALPHV’s servers, enabling law enforcement to monitor the group’s activities and help 500 of ALPHV’s 1,000 victims recover their data. ![Image 4: Ransomware, phishing and software vulnerabilities created the most havoc in H2 2023](https://staticfiles.acronis.com/images/content/0042988625d148dbcdf3d8836d05766b.png) ## 2024 Prediction: Cybercriminals will evade MFA and continue to abuse generative AI Leveraging AI tools such as ChatGPT, cybercriminals will launch personalized, tailored and targeted phishing campaigns to steal sensitive information from victims. We predict elevated levels of phishing, deepfake exploitation and automated attacks, as well as QR code-based phishing attacks that will bypass MFA. For an in-depth exploration of the top vulnerabilities, a breakdown on how AI-powered cyberattacks unfold — and actionable recommendations, download the full [Acronis Cyberthreat Year-end Report 2023](https://go.acronis.com/cyberthreats-2023-h2)! [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Ransomware protection](https://www.acronis.com/en/blog/tags/ransomware-protection/) [Cyber protection](https://www.acronis.com/en/blog/tags/cyber-protection/) [Malware protection](https://www.acronis.com/en/blog/tags/malware-protection/) [Data protection](https://www.acronis.com/en/blog/tags/data-protection/) [Cloud cyber protection](https://www.acronis.com/en/blog/tags/cloud-cyber-protection/) [Phishing](https://www.acronis.com/en/blog/tags/phishing/) ## Written by ![Image 5: Allison Ho](https://staticfiles.acronis.com/images/content/4001b7fac80a9a9ed6a3a01dec591360.png) Allison Ho Content Marketing Manager Allison develops content on cybersecurity, data protection, artificial intelligence and endpoint management while closely collaborating with thought leaders. Her technology B2B marketing experience includes expertise in SEO. [Previous post](https://www.acronis.com/en/blog/posts/five-practical-financial-kpi-reports-your-msp-business-automation-tool-should-have/) [5 Practical financial KPI reports your MSP business automation tool should have](https://www.acronis.com/en/blog/posts/five-practical-financial-kpi-reports-your-msp-business-automation-tool-should-have/) [Next post](https://www.acronis.com/en/blog/posts/m365-protection-security/) [What is the importance of having Microsoft 365 security and protection?](https://www.acronis.com/en/blog/posts/m365-protection-security/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 6: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 7: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read ![Image 8: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png) [Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/) Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform. **October 05, 2026**4 min read