A recent Mandiant report analyzed recent cyberattack trends. Of the threat groups tracked by Mandiant, 55% of threat groups active in 2024 were financially motivated, which marks a steady increase from 52% in 2023 and 48% in 2022. 8% of threat groups were motivated by espionage, which is a slight decrease from 10% in 2023.   

The most common initial infection vector was exploits (33%) for the fifth consecutive year. Stolen credentials (16%) rose to the second most common in 2024, marking the first time this vector has reached this level, and demonstrating its rising popularity. The remaining top five vectors include email phishing (14%), web compromises (9%), and prior compromises (8%).