--- title: "Acronis research reports a 293% increase in email attacks — ZEBR.ai" description: "The regular Acronis Cyberthreats Report has published data collected during the first half of 2024" url: "https://zebr.ai/en/blog/acronis-research-reports-a-293-increase-in-email-attacks" markdown_url: "https://zebr.ai/en/blog/acronis-research-reports-a-293-increase-in-email-attacks.md" language: "en" published: "2024-07-30T12:36:09+00:00" alternates: cs: "https://zebr.ai/cs/blog/pruzkum-acronis-hlasi-293-narust-e-mailovych-utoku.md" sl: "https://zebr.ai/sl/blog/raziskava-acronis-poroca-o-293-odstotni-rasti-e-postnih-napadov.md" sk: "https://zebr.ai/sk/blog/prieskum-acronis-hlasi-293-narast-e-mailovych-utokov.md" hr: "https://zebr.ai/hr/blog/istrazivanje-acronis-biljezi-porast-e-mail-napada-od-293.md" sr-Latn: "https://zebr.ai/sr-latn/blog/istrazivanje-kompanije-acronis-prijavljuje-porast-e-mail-napada-od-293.md" bs: "https://zebr.ai/bs/blog/istrazivanje-acronis-a-izvjestava-o-porastu-napada-putem-e-poste-od-293.md" sq: "https://zebr.ai/sq/blog/hulumtimi-i-acronis-raporton-nje-rritje-prej-293-te-sulmeve-me-email.md" fr: "https://zebr.ai/fr/blog/une-etude-acronis-signale-une-hausse-de-293-des-attaques-par-e-mail.md" es: "https://zebr.ai/es/blog/el-estudio-de-acronis-informa-de-un-aumento-del-293-en-los-ataques-por-correo-electronico.md" de: "https://zebr.ai/de/blog/acronis-studie-meldet-einen-anstieg-von-e-mail-angriffen-um-293.md" pt-BR: "https://zebr.ai/pt-br/blog/pesquisa-da-acronis-relata-aumento-de-293-nos-ataques-por-e-mail.md" pl: "https://zebr.ai/pl/blog/badanie-acronis-wskazuje-na-293-wzrost-atakow-e-mailowych.md" it: "https://zebr.ai/it/blog/la-ricerca-acronis-segnala-un-aumento-del-293-degli-attacchi-e-mail.md" nl: "https://zebr.ai/nl/blog/onderzoek-van-acronis-meldt-een-stijging-van-293-in-e-mailaanvallen.md" hu: "https://zebr.ai/hu/blog/az-acronis-felmerese-az-e-mailes-tamadasok-293-os-novekedeserol-szamol-be.md" ro: "https://zebr.ai/ro/blog/studiul-acronis-raporteaza-o-crestere-de-293-a-atacurilor-prin-e-mail.md" tr: "https://zebr.ai/tr/blog/acronis-arastirmasi-e-posta-saldirilarinda-293-artis-bildiriyor.md" id: "https://zebr.ai/id/blog/survei-acronis-melaporkan-peningkatan-293-serangan-email.md" --- [Home](https://zebr.ai/en/) [Blog](https://zebr.ai/en/blog) Acronis research reports a 293% increase in email attacks # Acronis research reports a 293% increase in email attacks [Acronis](https://zebr.ai/en/blog?tag=acronis) [e-mail](https://zebr.ai/en/blog?tag=e-mail) [MSP](https://zebr.ai/en/blog?tag=msp) [phishing](https://zebr.ai/en/blog?tag=phishing) [press release](https://zebr.ai/en/blog?tag=press-releases) [ransomware](https://zebr.ai/en/blog?tag=ransomware) The regular Acronis Cyberthreats Report has published data collected during the first half of 2024 30/07/2024 · 4 min read · ZEBR.ai editorial team *The regular Acronis Cyberthreats Report has published data collected during the first half of 2024* **PRAGUE, July 30, 2024 –** [Acronis](http://www.acronis.com/), a global leader in cybersecurity and data protection, today released new research findings from the first half of 2024 in its semi-annual cyberthreat report. The **Acronis Cyberthreats Report H1 2024** uses data from more than one million unique endpoints worldwide to provide insight into global cybersecurity trends. The latest report found that **email attacks increased by 293%** compared with the same period in 2023. The number of detected ransomware attacks also grew, rising by 32% from Q4 2023 to Q1 2024. Ransomware continues to pose a major threat to small and medium-sized businesses (SMBs), especially in critical sectors such as government and healthcare. In Q1 2024, Acronis recorded 10 new ransomware groups that collectively claimed 84 cyberattacks worldwide. Among the 10 most active ransomware families identified during this period, three particularly highly active groups stand out, collectively accounting for 35% of attacks: LockBit, Black Basta and PLAY. The report particularly notes how managed service providers (MSPs) are being targeted and compromised. Phishing and social engineering, vulnerability exploitation, credential abuse and supply chain attacks were identified as the most successful techniques used to breach MSP cybersecurity defenses. “As a result of the growing volume and complexity of cyberthreats that we continue to uncover in today’s cybersecurity landscape, it is critically important for MSPs to take a systematic approach to securing their customers’ data, systems and digital infrastructures,” said **Irina Artioli, report author and cyber protection expert in the Acronis Threat Research Unit division**. “To be effective, we recommend that MSPs adopt a comprehensive security strategy, including mandatory security threat training and incident response planning. They should also deploy advanced endpoint protection solutions, such as extended detection and response (XDR), multi-factor authentication and more.” In addition, the report focuses on emerging cybersecurity trends and highlights the growing use of generative artificial intelligence (AI) and large language models (LLMs). Specifically, it emphasizes AI used in social engineering attacks and automation. The most common AI-generated attacks include malicious emails, business email compromise (BEC) deepfake scams, deepfake extortion, KYC verification bypasses, and script and malware generation. Other key findings from the report include: **Email communications** – Organizations experienced a sharp increase in email communications, with the number of emails per organization rising by 25%. – The number of email attacks detected in the first half of 2024 increased by 293% compared with the first half of 2023. – 27.6% of all received emails were spam, and 1.5% contained malware or phishing links. **Ransomware** – In Q1 2024, 28 million URLs were blocked on monitored endpoints. – In Q1 2024, 1,048 ransomware cases were publicly reported, representing a 23% increase compared with Q1 2023. – In the first quarter of 2024, Acronis researchers recorded 10 new ransomware groups that collectively claimed 84 cyberattacks worldwide. – The number of ransomware detections increased by 32% from Q4 2023 to Q1 2024. **Attacks on MSPs** – Attacks on MSPs continued steadily from January to May 2024, with data revealing that attackers most often used email phishing campaigns. – Phishing attacks accounted for 30% of all attacks, attacks via Remote Desktop Protocol (RDP) for 24%, unpatched vulnerabilities for 23%, and credential abuse for 15%. – 26% of users encountered phishing attempts using malicious URLs. **AI-powered attacks** – Cybercriminals continue to use malicious AI tools such as WormGPT and FraudGPT. – Artificial intelligence can help attackers at every stage of a cyberattack, but it can also be used as a defense mechanism because it enables continuous attack detection and reports attacks to security experts, who can respond with appropriate measures to ensure business continuity. For more information, download a copy of the full report **[Acronis H1 2024 Cyberthreats Report here](https://www.acronis.com/en-us/resource-center/resource/acronis-cyberthreats-report-h1-2024/).** Further information about the report and its findings is available on the **[Acronis blog](https://www.acronis.com/en-us/blog/posts/acronis-cyberthreats-report-h1-2024-breaking-down-key-findings-from-the-report/).** Article author: ZEBR.ai editorial team Read on ## More related articles [All articles](https://zebr.ai/en/blog) ### [ZEBR.AI: N-able introduces shadow AI identification into its UEM and security solutions](https://zebr.ai/en/blog/zebr-ai-n-able-introduces-shadow-ai-identification-into-its-uem-and-security-solutions) New capabilities provide visibility into the use of AI tools across all endpoints and networks by individual identities, without the need for additional agents or infrastructure 28/09/2026 · 3 min read ### [Acronis: Ransomware can halt production even without attacking PLC systems](https://zebr.ai/en/blog/acronis-ransomware-can-halt-production-even-without-attacking-plc-systems) For manufacturing companies, ransomware is not just a matter of IT security, but a matter of production continuity 23/09/2026 · 3 min read ### [GFI Archiver AI simplifies integration with GFI KerioConnect](https://zebr.ai/en/blog/gfi-archiver-ai-simplifies-integration-with-gfi-kerioconnect) Direct integration of both products makes working with corporate emails easier, improves mail server performance, and enables more effective compliance with regulations 21/09/2026 · 2 min read Contact ## Do you need a solution for yourself or for your client? Tell us which service you are looking into, and a specialist in that area will get back to you directly. [(704) 745-4214](tel:+17047454214)\ --- - Source: - Site overview for AI agents: