

M-Trends 2023 cited a notable improvement in global median dwell time where an external entity was the notification source in 2022, down 32% compared to 2021. Attack dwell times drop, ransomware attacks decrease The metrics reported in M-Trends 2023 are based on Mandiant investigations of targeted attack activity conducted between January 1, 2022, and December 31, 2022. That said, several findings from this year’s report demonstrate that adversaries are progressively more sophisticated, persistent, and confident, as evidenced by hundreds of new malware families, extensive cyber espionage campaigns by nation-state-backed actors, and novel aggressive, personal tactics that ignore the traditional cyber rules of engagement.

The reduction in median dwell time reflects the key role partnerships and the exchange of information play in building a more resilient cybersecurity ecosystem, according to Mandiant. This is the shortest median global dwell time from all M-Trends reporting periods. The Mandiant M-Trends 2023 report, now in its fourteenth year, revealed that the global median dwell time – calculated as the median number of days an attacker is present in a target’s environment before detection – dropped to 16 days in 2022.

Global organizations are improving their attack detection capabilities despite facing increasingly sophisticated, persistent, and creative adversaries.
