Top Cyber Attacker Techniques, May–July 2024

ReliaQuest analyzed customer incidents and dark-web chatter from May 1–July 31, 2024, finding phishing (37% of incidents) and exposed credentials (88.75% of GMDRP alerts) as dominant initial-access vectors, SocGholish (FakeUpdates) as the top malware in critical incidents, widespread use of Cobalt Strike and Sliver C2s, and active ransomware targeting (notably manufacturing and PSTS sectors); the report includes trending IOCs, discussed CVEs and exploitation challenges on criminal forums, and recommends ARPs, MFA, patching, and behavioral detection to reduce MTTC and impact.