2024 Malicious Infrastructure Report

Insikt Group's 2024 Malicious Infrastructure Report catalogs a significant rise in identified malicious infrastructure and evolving attacker tactics, highlighting growth in MaaS infostealers (LummaC2), dominance of Cobalt Strike among offensive security tools, prevalence of RATs (AsyncRAT, QuasarRAT), large botnets (Mozi), and loader ecosystems (Latrodectus); it also documents global victim distribution across ~200 countries, increasing abuse of CDNs and legitimate internet services by both cybercriminals and state-sponsored groups, and provides detection and mitigation guidance for defenders.