Top Cyber-Threat Techniques in Q4 2023: What We’re Seeing

ReliaQuest's Q4 2023 report highlights that user-enabled social engineering (phishing and drive-by downloads) was the predominant initial access vector, attackers relied on command obfuscation for defense evasion, commonly used HTTPS for C2 to blend with normal traffic, and financial extortion—particularly ransomware and data-theft extortion—was the primary impact; the report includes detection recommendations and platform mitigations.