Critical Start H1 2024 Cyber Threat Intelligence Report

Critical Start is thrilled to announce the release of the Critical Start H1 2024 Cyber Threat Intelligence Report. This meticulously crafted report, developed by our expert Cyber Research Unit (CRU), provides a comprehensive analysis of the latest trends, threat actors, and incidents that have shaped the cyber threat landscape in the first half of 2024. The insights presented in this report are essential for organizations seeking to bolster their cybersecurity defenses and stay ahead of emerging threats

“Managed Detection and Response (MDR) is essential for containing incidents quickly, but cybersecurity strategies cannot rely solely on reactive controls. Our approach combines MDR with Managed Cyber Risk Reduction (MCRR) to prevent incidents before they occur, creating a robust defense against evolving threats.”
— Rob Davis, CEO of Critical Start

Key Findings

Industry Outlook The first half of 2024 saw significant cyberattacks targeting industries critical to global and national economies. The Manufacturing & Industrial Products sector remained the most targeted, followed by Professional Services, Healthcare & Life Sciences, Engineering & Construction, and Technology. These attacks have far-reaching implications, disrupting operations and impacting economic stability.

Threat Actors & Malware Families Our analysis identified the top ransomware groups, including LockBit, Play, Black Basta, Akira, and 8Base. These groups were responsible for over 40% of reported ransomware incidents and database leak events in H1 2024. Their tactics, techniques, and procedures (TTPs) continue to evolve, making them formidable adversaries in the cybersecurity landscape.

Timeline & TTP Trends The report highlights significant trends in the timing and methods of cyberattacks. Most incidents occurred mid-week, with a notable concentration of attacks between 10 AM and 3 PM CST. Phishing remains the primary initial access tactic, accounting for 58.98% of assessed incidents. These insights help organizations anticipate and prepare for potential threats.Trending Cybersecurity Concerns Emerging threats such as Business Email Compromise (BEC), deepfake technology in social engineering attacks, and the abuse of open-source repositories are highlighted. These evolving threats underscore the need for continuous vigilance and adaptive security measures.

Our report also details indicators of compromise (IoCs) and offers actionable mitigation strategies. These include heightened vigilance in web browsing, especially regarding advertisement links, and a recommendation to block access to Telegram APIs, a novel but necessary measure given the current threat landscape.

“The increasing use of deepfake technology and sophisticated phishing attacks highlights the need for advanced detection capabilities and comprehensive security training. Organizations must stay ahead of these trends to protect their critical assets effectively.”
— Randy Watkins, CTO of Critical Start

The Critical Start H1 2024 Cyber Threat Intelligence Report is essential reading for cybersecurity professionals working to understand the current cyber threat landscape and the measures necessary to safeguard your organization. Download the report here