Extortion and ransomware account for over half of cyberattacks

There is an urgent need to strengthen cybersecurity in the Adriatic region

Extortion and ransomware account for over 52% of cyberattacks with established motives, while espionage accounts for just 4%, according to Microsoft's new Digital Security Report.

Modern attackers are predominantly opportunistic criminals seeking financial gain, rather than state-sponsored entities. In 80% of the incidents, the attackers’ goal was data theft, highlighting the universal nature of this threat.

The numbers behind the threat

Automation and off-the-shelf cybercrime tools allow attackers to scale their operations, while artificial intelligence accelerates the creation of sophisticated and compelling attack content.

Microsoft processes over 100 trillion alerts daily, blocks approximately 4.5 million new malware attempts, analyzes 38 million identity risk detections, and scans 5 billion emails for malware and phishing threats. 

A matter of strategic management

The report sends a clear message: cybersecurity is a core strategic priority, not just an IT issue. Business leaders must integrate security into every aspect of digital transformation.

Urgent need for measures in the Adriatic

„Across the Adriatic region, the urgency to strengthen cybersecurity awareness and preparedness has never been greater,” commented Tomislav Vračić, National Technology Director at Microsoft for the Southern Europe Cluster.

„"As digital transformation accelerates in Croatia, Slovenia, Serbia, Albania, Bulgaria and neighboring markets, both the public and private sectors must act decisively to protect critical infrastructure and citizens' trust. Proactive protection is a strategic necessity to secure our common digital future," he added.

Critical services under siege

Hospitals, schools and local institutions are increasingly targeted by attacks due to sensitive data and limited cybersecurity resources. The consequences include delayed medical care, disrupted education and halted transportation.

The perpetrators behind ransomware attacks exploit these vulnerabilities because critical sectors often pay quickly to restore their operations.

Modernization is mandatory

Microsoft's Digital Security Report highlights that outdated security measures are no longer enough. Modernizing protections and strong collaboration between industry and governments are essential. 

For individual users, using multi-factor authentication (MFA) – especially phishing-resistant MFA – can block over 99% of identity-targeted attacks.

Threats from countries continue

While criminals are the most common attackers, state actors continue to target key industries and regions, primarily for espionage and sometimes for financial gain. In its report, Microsoft listed China, Russia, Iran and North Korea as threats.

Artificial intelligence accelerates threats

Both attackers and defenders are using artificial intelligence. Cybercriminals use it to automate phishing attacks and create synthetic content, while defenders use it to fill detection gaps and protect users.

Shared responsibility

As threats become more sophisticated, organizations must continually update their defenses and share intelligence. Governments must establish clear norms that enforce credible consequences for malicious activity and encourage transparency.

As digital transformation accelerates – fueled by the rise of artificial intelligence – cyber threats increasingly impact economic stability, public trust and personal security. Addressing these challenges requires not only innovation but also coordinated societal action.

Source: https://technews.bg/