2024 Data Breach Investigations Report

Published on: 
May 1, 2024

Another year has passed and that means another Verizon DBIR. For those that don’t want to read the full DBIR, here was our perspective from the Internet intelligence side of cybersecurity:

  • Median time for users to fall for phishing emails is 49 seconds
  • Pretexting is a more likely social action than Phishing
  • Ransomware was a top threat across 92% of industries (less representative than last year - median ratio of initially requested ransom and company revenue was only 1.34%)
  • The human element was a component of 68% of breaches


What do these threats all have in common? DNS!

https://www.verizon.com/business/resources/reports/dbir

Related Content

Research
Spetsvuzavtomatika Leak Exposes an SVR Cyber Development Ecosystem

A darknet data leak from the Russian research institute Spetsvuzavtomatika (SVA) has exposed an extensive cyber development ecosystem serving Russia’s Foreign Intelligence Service (SVR). The leaked Git repositories, project specs, and technical reports reveal a sophisticated, modular research and development model focused on automating key phases of espionage—from cloud-agent command-and-control (Initiative-24) and automated target reconnaissance (Felix-23, HAD) to internal domain exploitation (Putnik) and anonymous infrastructure procurement (Chain-24).

Learn More
Research
Lemmings: Russian Industrialized Persona Provisioning and Management for Active Measures Campaigns

Leaked internal data from Russian contractor Okenit reveals "Lemmings" (Лемминги)—a Python-based framework designed to industrialize the creation, verification, and management of synthetic online personas for Russian active measures. Built to automate phone verification, email infrastructure, CAPTCHA solving, and anti-detection measures, Lemmings functions as the identity-provisioning layer within a larger ecosystem alongside proxy and tasking tools (SOI and SOS). Live tests against platforms like VK and Reddit demonstrate a shift toward scalable, modular software frameworks capable of maintaining durable cover identities for intelligence, influence, and disinformation operations.

Learn More
Research
Threat Intelligence Report: University Leak Exposes Russia’s Military Cyber Training Pipeline

A leaked cache of institutional files reveals that Department No. 4 at Bauman Moscow State Technical University operates as a structured force-generation pipeline for Russian military cyber operations, training roughly 250 students across specializations. Supervised directly by senior GRU leadership, the program blends offensive intrusion, malware analysis, financial-systems targeting, and cryptographic defense with field placements that feed graduates straight into GRU- linked cyber formations like APT28 (Unit 26165) and Sandworm (Unit 74455).

Learn More