Halcyon Threat Insights 007: July 2024 Ransomware Report

**Executive Summary:** Halcyon’s July 2024 threat intelligence highlights increased ransomware activity—particularly against IT and Finance sectors—catalogues trojan precursors and ransomware families blocked by their systems, reports hundreds of alleged and confirmed attacks (393 alleged, 342 confirmed), and profiles active and emerging extortion groups and observed TTPs including RDP compromise, exploitation of CVE-2023-3519, double-extortion tactics, and new ESXi-targeting Linux variants.