Attack trends in multi-channel phishing, identity deception, malicious new domains, and more
This inaugural Phishing Threats Report explores key attack trends based on approximately 13 billion emails processed by Cloudflare over a one-year period. For example:
Deceptive links were the #1 phishing tactic, comprising nearly 36% of threats.
Firms are increasingly vulnerable to multi-channel phishing, which targets users in channels beyond email.
Identity deception threats are rising — and millions of them “passed” SPF, DKIM, and DMARC checks.
The majority of the time, attackers posed as just 20 well-known brands, such as Microsoft, Google, Salesforce, and Amazon.
Understanding the latest phishing trends — including how attackers are exploiting users’ trust in known entities — is an important first step to preventing phishing.
