A bank in South Africa received a ransom email from the Armada Collective, which was quickly followed by a teaser flood attack that the bank proactively mitigated. Ransom attacks are by far the most prevalent threat, growing from 25% of attacks in 2015 to 41% in 2016. The bank has experienced a fourfold increase in burst attacks, but attacks lasting more than an hour are decreasing. The trend seems to be shifting toward very short, hit and run assaults.”]