Arete’s global teams garner data and insights from every aspect of the threat lifecycle. From incident response and restoration to threat actor communications and managed services, this comprehensive visibility informs our understanding and analysis of the threat landscape. Leveraging data collected during incident response engagements, we see the rise and fall of ransomware variants, notable trends in ransom demands and payments, industries targeted by ransomware attacks, and what may be coming next. This report details the trends observed during Arete’s response to ransomware and extortion attacks from January 1 through June 30, 2024.