1H 2022 Incident Response Insights

Arctic Wolf Labs’ H1 2022 incident-response review reports a notable Q2 increase in business email compromise, a median ransomware demand of $450,000 with industry variance, and that 81% of incidents began via external exposures (notably ProxyShell/Exchange, Log4J/VMware Horizon, and exposed RDP); LockBit emerged as the dominant ransomware group and Healthcare was the most frequently impacted sector.