Expel Quarterly Threat Report, volume I: Q3 2024 by the numbers

**Expel QTR Q3 2024 — Executive summary:** Expel's Q3 2024 threat report finds identity-based attacks (account compromise and takeover) accounted for 72% of incidents, malware 14% (with Lumma infostealer responsible for 56% of infostealer infections), and cloud incidents only 2%; the report highlights social-engineering lures (including CAPTCHA and fake error messages), PowerShell-driven infections, the rise of PhaaS, and supply-chain concerns while offering detection and mitigation guidance across follow-up volumes.