VendorsZeroFox
ZeroFox
Cybersecurity reports and statistics published by ZeroFox
8 categories1 reports
Research Reports
Reports and publications from ZeroFox
Recent Statistics & Reports
The manufacturing industry was the most-targeted industry in R&DE incidents during 2024, accounting for approximately 17.7 percent of attacks globally.
1/1/2025•
R&DEManufacturing
Play Ransomware conducted an average of 30 attacks per month, peaking in October 2024 with at least 52 attacks10. Approximately 89.9 percent of Play Ransomware's victims were based in North America10. 24.7% of Play Ransomware's victims were in the manufacturing industry and 17.5% were in the construction industry.
1/1/2025•
R&DEPlay RansomwareNorth America
Akira averaged 19 attacks per month between January 2024 and November 2024. In December, the collective added at least 93 separate victims to their leak site, bringing their 2024 monthly average up to approximately 25. Throughout 2024, approximately 71 percent of Akira’s victims were based in North America, rising to approximately 81 percent in Q4 2024.
1/1/2025•
R&DEAkiraNorth America
During 2023, 50 percent of global R&DE incidents were attributed to just five collectives, and 75 percent of incidents could be attributed to 14 collectives. However, during 2024, 50 percent of global R&DE incidents were attributed to eight collectives, with 20 collectives responsible for 75 percent of global incidents.
1/1/2025•
R&DE
LockBit was responsible for a significantly lessened proportion of R&DE activity in 2024, due to early-2024 law enforcement (LE) disruption operations3. In 2023, LockBit accounted for over 820 separate incidents and approximately 20% of global R&DE activity4. In Q4 2024, LockBit accounted for just 1% of global R&DE5. LockBit added 175 victims to its leak site in May 2024.
1/1/2025•
R&DELockBit
ZeroFox observed at least 4,950 separate ransomware and digital extortion (R&DE) incidents throughout 2024, which is significantly more than the approximately 4,000 incidents observed during 2023.
1/1/2025•
RansomwareR&DE
RansomHub was the most prominent R&DE collective in 2024. RansomHub accounted for approximately 10% of all R&DE incidents ZeroFox observed throughout the year and conducted at least 216 attacks during Q4 2024. In November 2024, RansomHub conducted at least 97 attacks.
1/1/2025•
R&DERansomHub
ZeroFox identified 45 new R&DE collectives during 2024, compared to 35 during 2023.
1/1/2025•
R&DE
Hunters International averaged 19 incidents per month.
1/1/2025•
R&DEHunters International
North America was consistently the most-targeted region during 2024, accounting for an average of approximately 58 percent of global R&DE attacks.
1/1/2025•
R&DENorth America