21% of ransomware incidents involved installing backdoors for persistence.

Of all the malware cases, 28% involved ransomware, followed by backdoors and webshells, at 20% and 13% respectively.