Motivations March H1 2024

No Data Found

Attack Techniques March H1 2024

No Data Found

In the first timeline of March 2024 I collected 98 events (6.13 events/day), once again characterized by a majority of malware attacks with a value (19.2%) lower than the previous timeline, when it was 25%.

Ransomware attacks were stable at number two, with 15.2%, once again a value slightly lower than the previous timeline when it was 16%. Similarly, the exploitation of vulnerabilities (very often aimed to deliver malware or ransomware) was stable at number three with 14.1%, in practice the same value of the previous timeline when it was 14%, this time “thanks” to the contribution of the Screenconnect and Teamcity vulnerabilities.

In terms of mega breaches, there was just one significant event in France, where France Travail, formerly known as Pôle Emploi, warned that threat actors stole (again) personal details of an estimated 43 million individuals.

In the fintech sector, decentralized finance platform WOOFi experienced an $8.75 million by a threat actor who used flash loans to manipulate the algorithm.

As always, as we are used in this complicated period, state-aligned threat actors from Russia, China and North Korea were quite active, especially APT28 and APT29 (the latter allegedly stole some portions of Microsoft source code), Kimsuky, and Evasive Panda.

But it’s the Cyberwar front, which probably offered the most interesting events: the Main Intelligence Directorate of Ukraine’s Ministry of Defense breached the Russian Ministry of Defense, Russian media outlets published an intercepted conversation via Webex, in which Bundeswehr officials were discussing the country’s support for Ukraine, a new wiper malware, WinDestroyer, was discovered, and an RAF plane carrying U.K. Defence Secretary Grant Shapps had its GPS signal jammed while flying close to Russian territory.

And finally there were some DDoS attacks, in particular the Pro-Russian Anonymous Sudan disrupted some Alabama State Government websites.

For the details, feel free to browse the timeline, and obviously share it to support my work in spreading the risk awareness across the community. And don’t forget to follow @paulsparrows on X (formerly Twitter,) or even connect on Linkedin, or Mastodon for the latest updates.

Geo Map March H1 2024

No Data Found



Creating the timelines is a very time-consuming task.

Any little helps!

  • Featured Image Q1 2024Q1 2024 Cyber Attacks Statistics

    I aggregated the statistics created from the cyber attacks timelines published in the first quarter of 2024. In this period, I collected a total of 833 events (9.15 events/day) dominated by Cyber Crime with 75.2%...

  • Free computer code screen image16-31 March 2024 Cyber Attacks Timeline

    In the second timeline of March 2024 I collected 104 events dominated by malware, exploitation of vulnerabilities and ransomware. The threat landscape was also characterized by several mega breaches, multiple cyber espionage operations and also some remarkable events related to cyber warfare.

  • 2020 Cyber Attacks Statistics

    As promised, I have pulled together some statistics from the data collected in 2020. The master table is available at the end of the post after the charts.

  • The Biggest Data Breaches of 2021

    With this new project I am going to track the biggest data breaches of 2021 extracted from my cyber attack timelines.

  • March 2024 MotivationsMarch 2024 Cyber Attacks Statistics

    In March 2024 I collected and analyzed 203 events dominated by malware attacks. Cyber Crime continued to lead the Motivations chart with 72.9%, ahead of Cyber Espionage with 13.3%, Cyber Warfare (5.9%) and Hacktivism (2.5%).


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.