Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1001727" data-attributes="member: 32260">The source of the Statista data is the &quot;Mid-Year Update to the 2022 SonicWall Cyber Threat Report&quot;.[URL unfurl=&quot;true&quot;]https://www.sonicwall.com/resources/white-papers/mid-year-2022-sonicwall-cyber-threat-report/[/URL]The data is collected via SonicWall Capture Threat Network (real-world data):[URL unfurl=&quot;true&quot;]https://capturelabs.sonicwall.com/m/feature/security-center[/URL][ATTACH=full]268990[/ATTACH]I compared the data with the Microsoft report. The &quot;attack&quot; term used by SonicWall and Statista is very similar to the term &quot;malware threat blocked by Microsoft Defender for Endpoint&quot; (18265 blocked threats per 1 minute = 4.8 billion in 6 months).[URL unfurl=&quot;false&quot;]https://www.microsoft.com/en-us/security/business/security-insider/threat-intelligence/cyberthreat-minute/[/URL]So, the term &quot;attack&quot; means a threat detected/blocked via SonicWall Capture Threat Network.The 90% (+-5%) of unique samples is intriguing. It would mean that most samples are not reused at all, because they are replaced very quickly by other morphed samples.</blockquote>

[QUOTE="Andy Ful, post: 1001727, member: 32260"] The source of the Statista data is the "Mid-Year Update to the 2022 SonicWall Cyber Threat Report". [URL unfurl="true"]https://www.sonicwall.com/resources/white-papers/mid-year-2022-sonicwall-cyber-threat-report/[/URL] The data is collected via SonicWall Capture Threat Network (real-world data): [URL unfurl="true"]https://capturelabs.sonicwall.com/m/feature/security-center[/URL] [ATTACH type="full" width="704px" alt="1662597063847.png"]268990[/ATTACH] I compared the data with the Microsoft report. The "attack" term used by SonicWall and Statista is very similar to the term "malware threat blocked by Microsoft Defender for Endpoint" (18265 blocked threats per 1 minute = 4.8 billion in 6 months). [URL unfurl="false"]https://www.microsoft.com/en-us/security/business/security-insider/threat-intelligence/cyberthreat-minute/[/URL] So, the term "attack" means a threat detected/blocked via SonicWall Capture Threat Network. The 90% (+-5%) of unique samples is intriguing. It would mean that most samples are not reused at all, because they are replaced very quickly by other morphed samples. [/QUOTE]

Verification