Expel Quarterly Threat Report Q2 2024 volume III: Malware infection trends

This Expel Q2 2024 malware trends report analyzes infections across its customer base, identifying Remote Access Trojans (both commercial and attacker-built) as the most prevalent high-risk threat, ongoing activity from actors like SocGholish, GootLoader, and ZPHP that use JavaScript, traffic delivery systems, and SEO poisoning to deliver payloads, a shift in common malicious file types from JavaScript to EXE, and practical mitigations such as using Group Policy to prevent execution of uncommon script formats.