To compare the number of prevented attacks between countries and time intervals, we have normalized the numbers. Hence we are subsequently using the term prevented attacks. Since this file cannot do any harm to the system the attack is prevented. We are counting each file that our scanners are blocking. The counting is based on notifications about incidents, that we receive from users of our product, if the participate in G DATA's Malware Information Initiative (briefly MII). But most of the attacks are part of small campaigns often in far away countries. A single malware can attack thousands or even millions of computers. The number of new malware specimen tells little about the number of executed attacks. But ransomware families are the most productive in the second half of 2017. This might not sound overwhelmingly high. While ransomware was hardly measurable (<0.1%) in the first half 2017, their number increased six-fold to a share of 0.2% in the 2nd half. These are followed by backdoors, worms, an ransomware. A stronger second place is achieved by Adware (13.0%) and Potentially Unwanted Programs (PUP, 3.3%). The bigger part of malware types are with 82.7% covered by Trojans. Although the numbers of the second half of 2017 did not gain new records, we still expect the amount of new malware to continue rising. The historic comparison with 2007 reveals that 2017 comes up with more than 63 times more malware. The average for the whole year 2017 is slightly higher: 959 per hour and 16 per minute, respectively. In the second half of 2017 on average 795 new malware specimen were discovered per hour i.e. Figure 1: Number of new malware specimen since 2007

G data antivirus 2017