Email cyberattacks on business users skyrocket with a 197% increase during the second half of 2024 compared to the same period in 2023.

The “Acronis Cyberthreats Report, H2 2024” highlights that nearly 50% of business users were targeted by at least one email-based attack, emphasizing the growth of cybercriminal tactics.

From July to December 2024, spam accounted for 31.4% of all received emails, while 1.4% contained malware or phishing links. Managed service providers (MSPs) were especially vulnerable, with 33% experiencing phishing campaigns targeting their networks.

Cybercriminals also exploited vulnerabilities in Remote Desktop Protocol (RDP) and remote access tools to breach MSP systems, reinforcing the need for stronger cybersecurity measures.

A concerning trend highlighted in the report is the increased targeting of MSPs by advanced persistent threat (APT) ransomware groups. These cybercriminals use stolen credentials, social engineering, and supply chain attacks to gain access to MSP networks and deploy ransomware, making them strategic entry points for widespread cyberattacks.

The UAE was among the most targeted nations in December 2024, reporting the highest percentage of blocked malicious URLs (16.2%), followed by Brazil (13.2%) and Singapore (12.0%).

“The rise of AI-generated attacks and the increasing sophistication of ransomware campaigns pose serious challenges for businesses and MSPs worldwide,” said Gerald Beuchelt, CISO at Acronis.

“By analyzing these emerging threats, our report provides actionable insights to help organizations strengthen their defenses.”

As remote monitoring and management (RMM) tools become more widely used, they also introduce security risks. The report warns that without proper controls, these tools can serve as gateways for ransomware attacks, underscoring the importance of robust cybersecurity strategies.