---
title: "Acronis Cyberthreats Report, H1 2024: Phishing remains the #1 threat, new ransomware groups emerge"
description: The Acronis Cyberthreats Report provides an in-depth look at the global threat landscape as encountered by Acronis sensors and analysts during the first half of 2024.
canonical_url: https://www.acronis.com/en/resource-center/resource/acronis-cyberthreats-report-h1-2024/
locale: en
last_updated: 2026-10-11
---

Businesses

White papers

# Acronis Cyberthreats Report, H1 2024: Phishing remains the #1 threat, new ransomware groups emerge

## Uncover critical insights and emerging threats in cybersecurity

Stay ahead of cyberthreats with the Acronis Cyberthreats Report. This biannual analysis provides an in-depth look at the global threat landscape as encountered by Acronis sensors and analysts during the first half of 2024. Drawing from data gathered from over 1,000,000 unique endpoints worldwide, this report is an essential resource for understanding the evolving challenges in cybersecurity.

**What's inside the report?**

*   **Comprehensive malware analysis**: Explore detailed statistics and trends from January to May 2024, focusing on threats targeting Windows operating systems.
*   **Global impact**: Learn which countries faced the highest rates of malware attacks, with a spotlight on North America, Europe, the Middle East and Asia.
*   **Ransomware trends**: Discover key insights into the rise of ransomware attacks, including the most active ransomware groups such as LockBit, Black Basta and Play.
*   **Emerging threats**: Understand the role of AI in cyberattacks, emerging threats to collaboration apps and unique phishing techniques. 
*   **Security recommendations**: Gain valuable strategies from Acronis to enhance your organization’s defense mechanisms.

**Key findings**:

*   3% increase in URLs blocked at the endpoint in Q1 2024 compared to Q4 2023.

*   293% surge in email attacks in the first half of 2024 compared to the same period in 2023.

*   Each malware sample lives an average of 2.3 days in the wild before it disappears — 82% of samples were only seen once.

*   LockBit accounted for 20% of ransomware attacks, followed by Black Basta and Play, with 7.1% and 7.0% respectively.

Download your copy now

![Image 1: Acronis Cyberthreats Report, H1 2024: Phishing remains the #1 threat, new ransomware groups emerge](https://staticfiles.acronis.com/images/content/6be8c0ca925ee5b097a7b495cb86bd86.png)

Download Acronis white papers for free

First name

Enter first name

Last name

Email

Phone

Example: 043 012 345

I agree to the Acronis [Terms of Service](https://www.acronis.com/en/legal/) and [Privacy Statement](https://www.acronis.com/en/company/privacy/)

Read now

Protected by reCAPTCHA. [Google Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.

Google Recaptcha