When you serve as the internet’s switchboard, you see a lot of hookups. Cisco Umbrella’s cloud-native global cloud architecture processes more than 620 billion internet requests daily. Oftentimes, it’s the relationships between different types of active threats and the associated internet activity directed toward malicious domains that deliver deeper insights into patterns of cybercriminal behavior.
The data in this report reflects a continuation of the trend we have been seeing toward more complex, multi-staged attacks that involve multiple threat types. Typically, in the attack chain, we’re seeing things like a trojan begat an information loader, which begat a ransomware demand.