{"id":4172,"date":"2023-09-20T19:14:51","date_gmt":"2023-09-20T13:44:51","guid":{"rendered":"https:\/\/phishgrid.com\/?p=4172"},"modified":"2024-06-11T18:20:01","modified_gmt":"2024-06-11T12:50:01","slug":"facts-about-phishing","status":"publish","type":"post","link":"https:\/\/phishgrid.com\/blog\/facts-about-phishing\/","title":{"rendered":"10 Facts About Phishing That You Should Know"},"content":{"rendered":"\n<blockquote class=\"wp-block-quote has-black-color has-pale-ocean-gradient-background has-text-color has-background is-layout-flow wp-block-quote-is-layout-flow\" style=\"font-style:italic;font-weight:500\">\n<p class=\"has-medium-font-size\" style=\"font-style:italic;font-weight:500\">What is every hacker&#8217;s weekend getaway? <\/p>\n\n\n\n<p class=\"has-medium-font-size\" style=\"font-style:italic;font-weight:500\">They go&nbsp;<em>phishing<\/em>&#8230;<\/p>\n<cite>A<\/cite><\/blockquote>\n\n\n\n<p>In an increasingly digital world, where information flows freely and transactions occur at the click of a button, the threat of phishing looms larger than ever before. Phishing, a deceptive practice designed to manipulate individuals into revealing confidential information or performing malicious actions, has evolved into a formidable <a href=\"https:\/\/www.tikaj.com\/blog\/whati-is-cybercrime-and-what-you-should-do\/\" target=\"_blank\" rel=\"noreferrer noopener\">cybercrime<\/a>. Understanding the nuances and dangers of phishing is crucial for individuals and organizations alike.<\/p>\n\n\n\n<p>In this article, we will delve into 10 essential facts about phishing that everyone should know, shedding light on the tactics employed by cybercriminals, the potential consequences of falling victim to these scams, and most importantly, how to protect yourself from this pervasive online threat and data breach. Whether you\u2019re a seasoned internet user or just beginning your digital journey, the insights within these pages will empower you to navigate the virtual world with greater confidence and security.<\/p>\n\n\n\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Table of Contents<\/h2><nav><ol><li><a href=\"#what-is-phishing\">What is Phishing?<\/a><\/li><li><a href=\"#10-facts-about-phishing\">10 Facts About Phishing<\/a><ol><li><a href=\"#1-phishing-attacks-are-the-most-common\">1. Phishing attacks are the most common.<\/a><\/li><li><a href=\"#2-95-of-attacks-on-business-networks-are-the-result-of-successful-spear-phishing\">2. 95% of attacks on business networks\u00a0are the result of successful spear phishing<\/a><\/li><li><a href=\"#3-1-in-3-employees-are-likely-to-click-the-links-in-phishing-emails\">3. 1 in 3\u00a0employees are likely to click the links in phishing emails.\u00a0\u00a0\u00a0<\/a><\/li><li><a href=\"#4-41-of-employees-failed-to-notice-a-phishing-message-because-they-were-tired\">4. 41%\u00a0of employees failed to notice a phishing message because they were tired.<\/a><\/li><li><a href=\"#5-smaller-organizations-see-a-higher-rate-of-malicious-emails-like-phishing-emails\">5. Smaller organizations see a higher rate of malicious emails like phishing emails.<\/a><\/li><li><a href=\"#6-sextortion-is-one-of-the-most-common-tactics-in-phishing-campaigns\">6. Sextortion is one of the most common tactics in phishing campaigns.<\/a><\/li><li><a href=\"#7-the-cost-of-phishing-attacks-has-almost-quadrupled-over-the-past-seven-years\">7. The cost of\u00a0phishing attacks\u00a0has almost quadrupled over the past seven years<\/a><\/li><li><a href=\"#8-80-of-reported-security-incidents-are-phishing-related\">8. 80% of reported security incidents\u00a0are phishing-related\u00a0<\/a><\/li><li><a href=\"#9-exponential-increase-in-vishing-attacks\">9. Exponential increase in vishing attacks<\/a><\/li><li><a href=\"#10-global-brands-mostly-impersonated-in-phishing\">10. Global brands mostly impersonated in phishing<\/a><\/li><\/ol><\/li><li><a href=\"#fa-qs\">FAQs<\/a><ol><li><a href=\"#faq-question-1694583737779\">1. What are the main causes of phishing?<\/a><\/li><li><a href=\"#faq-question-1694583835078\">2. How common are phishing attacks?<\/a><\/li><li><a href=\"#faq-question-1694583878980\">3. What type of phishing attack targets specific users or groups?<\/a><\/li><li><a href=\"#faq-question-1694584050358\">4. Where is phishing most common?<\/a><\/li><\/ol><\/li><\/ol><\/nav><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-large-font-size\" id=\"what-is-phishing\">What is Phishing?<\/h2>\n\n\n\n<p>Phishing is a type of cyber attack in which malicious actors attempt to deceive individuals or organizations into revealing confidential information, such as credentials, credit card numbers, or other personal or financial data.<\/p>\n\n\n\n<p>The stolen credentials or details are then used to execute the next steps of the attacker&#8217;s plan which might include<\/p>\n\n\n\n<p>Phishers use various communication channels, including email from similar domains as the original, text messages (SMS), voice calls (vishing), or social media, to reach their targets. These messages are designed to appear trustworthy and convincing.&nbsp;<a href=\"https:\/\/phishgrid.com\/blog\/what-is-a-common-indicator-of-a-phishing-attempt\/\">Phishing attempts <\/a>often impersonate trusted entities, such as banks, government agencies, well-known companies, or colleagues. Attackers may use logos, email addresses, or language that mimics the real organization.<\/p>\n\n\n\n<p>The primary goal of phishing is often to steal sensitive data, such as login credentials, credit card numbers, social security numbers, or other personal or financial information.<\/p>\n\n\n\n<p>Let\u2019s see the most common and interesting facts about phishing further below.<\/p>\n\n\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-1 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"976\" height=\"487\" data-id=\"4186\" src=\"https:\/\/phishgrid.com\/wp-content\/uploads\/sites\/24\/2023\/09\/account-termination-phish-2022-09-29_12-05-23.png\" alt=\"see the most common and interesting facts about phishing \" class=\"wp-image-4186\" srcset=\"\/\/phishgrid.com\/wp-content\/uploads\/sites\/24\/2023\/09\/account-termination-phish-2022-09-29_12-05-23.png 976w, \/\/phishgrid.com\/wp-content\/uploads\/sites\/24\/2023\/09\/account-termination-phish-2022-09-29_12-05-23-300x150.png 300w, \/\/phishgrid.com\/wp-content\/uploads\/sites\/24\/2023\/09\/account-termination-phish-2022-09-29_12-05-23-768x383.png 768w, \/\/phishgrid.com\/wp-content\/uploads\/sites\/24\/2023\/09\/account-termination-phish-2022-09-29_12-05-23-650x324.png 650w\" sizes=\"(max-width: 976px) 100vw, 976px\" \/><\/figure>\n<\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"10-facts-about-phishing\">10 Facts About Phishing<\/h2>\n\n\n\n<figure class=\"wp-block-gallery has-nested-images columns-default is-cropped wp-block-gallery-2 is-layout-flex wp-block-gallery-is-layout-flex\">\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" width=\"420\" height=\"315\" data-id=\"4188\" src=\"https:\/\/phishgrid.com\/wp-content\/uploads\/sites\/24\/2023\/09\/i-thought-i-wouldnt-fall-for-phishing-and-then-i-did-.gif\" alt=\"facts about phishing\" class=\"wp-image-4188\" \/><\/figure>\n<\/figure>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"1-phishing-attacks-are-the-most-common\">1. <strong>Phishing attacks are the most common<\/strong>.<\/h3>\n\n\n\n<p>Phishing statistics suggest that nearly 1.2% of all emails sent are malicious, which in numbers translates to 3.4 billion phishing emails daily. Data breaches of over 33 million records are expected to occur by 2023 with a ransomware or phishing attack occurring every 11 seconds. Phishing attacks are effective because they often exploit human psychology and use\u00a0<a href=\"https:\/\/www.tikaj.com\/blog\/what-is-social-engineering\/\" target=\"_blank\" rel=\"noreferrer noopener\">social engineering<\/a> tactics to deceive recipients. Phishing campaigns are relatively low-cost compared to other forms of cyberattacks, such as developing sophisticated malware and some campaigns might even contain malware as attachments.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"2-95-of-attacks-on-business-networks-are-the-result-of-successful-spear-phishing\">2. 95% of attacks on business networks&nbsp;are the result of successful spear phishing<\/h3>\n\n\n\n<p>Spear phishing is a highly targeted form of phishing where cybercriminals tailor their phishing message to specific individuals or organizations. They often gather personal information to make the email appear more convincing. It\u2019s true that spear-phishing is a prevalent and dangerous threat in the <a href=\"https:\/\/phishgrid.com\/blog\/cybersecurity-terms\/\">cybersecurity<\/a> world.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"3-1-in-3-employees-are-likely-to-click-the-links-in-phishing-emails\">3. 1 in 3&nbsp;employees are likely to click the links in phishing emails.&nbsp;&nbsp;&nbsp;<\/h3>\n\n\n\n<p>Phishing attacks are effective because they often exploit human psychology and rely on social engineering tactics. Attackers craft convincing emails that appear legitimate and use persuasive techniques to manipulate recipients into taking actions that can compromise security. Organizations must invest in educating their employees and provide security awareness training about the risks of phishing and how to recognize phishing attempts. Training can help reduce the likelihood of employees clicking on malicious links or disclosing private information.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"4-41-of-employees-failed-to-notice-a-phishing-message-because-they-were-tired\">4. 41%&nbsp;of employees failed to notice a phishing message because they were tired.<\/h3>\n\n\n\n<p>Fatigue, whether due to long working hours, lack of sleep, or other factors, can impair an individual\u2019s cognitive function and decision-making abilities. When employees are tired, they may be less alert and attentive, making them more vulnerable to phishing attacks. To mitigate the risk associated with tired employees, organizations should provide\u00a0security training that includes guidance on recognizing phishing attempts, even when individuals are fatigued. Employees should be encouraged to remain cautious and skeptical, especially when they are tired.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"5-smaller-organizations-see-a-higher-rate-of-malicious-emails-like-phishing-emails\">5. <strong>Smaller organizations see a higher rate of malicious emails<\/strong> like phishing emails.<\/h3>\n\n\n\n<p>Larger organizations typically have larger budgets for cybersecurity and may invest in more advanced security solutions, employee training, security awareness, and incident response capabilities. This can make them more resilient to phishing attacks. Phishing attacks often target individuals and organizations based on various criteria, including industry type, the potential value of stolen information, and the perceived ease of success. Smaller organizations may be targeted if they are perceived as having weaker cybersecurity defenses.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"6-sextortion-is-one-of-the-most-common-tactics-in-phishing-campaigns\">6. Sextortion is one of the most common tactics in phishing campaigns.<\/h3>\n\n\n\n<p>Sextortion phishing emails typically involve threats to expose compromising or sensitive information about the recipient unless they comply with the sender\u2019s demands. These <a href=\"https:\/\/www.tikaj.com\/blog\/what-are-spam-emails-and-its-types\/\" target=\"_blank\" rel=\"noreferrer noopener\">phishing emails<\/a> rely heavily on social engineering tactics to create fear, panic, and urgency. The goal is to pressure the recipient into complying with the attacker\u2019s demands out of fear of reputational or personal harm. To prevent falling victim to sextortion phishing, individuals should maintain strong\u00a0security practices, including using strong and unique passwords, etc, and being cautious when opening emails from unknown senders. It\u2019s also important not to engage with or respond to such emails.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"7-the-cost-of-phishing-attacks-has-almost-quadrupled-over-the-past-seven-years\">7. The cost of&nbsp;phishing attacks&nbsp;has almost quadrupled over the past seven years<\/h3>\n\n\n\n<p>Phishing attacks have become increasingly sophisticated over the years which even include email compromise. Cybercriminals continually refine their tactics, making it more challenging for individuals and organizations to detect and defend against phishing attempts. These advancements can lead to more successful and financially damaging attacks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"8-80-of-reported-security-incidents-are-phishing-related\">8. 80% of reported security incidents&nbsp;are phishing-related&nbsp;<\/h3>\n\n\n\n<p>Phishing attacks target a broad range of organizations and individuals, making it a widespread concern across various industries and sectors. Phishing remains one of the most common and successful <a href=\"https:\/\/phishgrid.com\/blog\/attack-vectors-and-how-to-protect-against-them\/\">attack vectors<\/a> for cybercriminals. It is relatively easy to execute and can yield substantial rewards for attackers.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"9-exponential-increase-in-vishing-attacks\">9. Exponential increase in vishing attacks<\/h3>\n\n\n\n<p>According to surveys of working adults and IT professionals conducted in 2022, almost seven in 10 respondents reported having encountered vishing attacks. This represents an increase from 54 percent in 2020. Vishing attacks are a <a href=\"https:\/\/phishgrid.com\/blog\/social-engineering-attacks\/#10-types-of-social-engineering-attacks-that-can-destroy-your-business\">type of social engineering attack<\/a> performed over phone calls or voice messages for phishing.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-medium-font-size\" id=\"10-global-brands-mostly-impersonated-in-phishing\">10. Global brands mostly impersonated in phishing<\/h3>\n\n\n\n<p><strong>Microsoft<\/strong>&nbsp;has accounted for 29 percent of all phishing attempts this year. Check Point Research\u2019s Brand Phishing Report for Q2 2023 reveals that Microsoft has taken the lead as the most impersonated brand for phishing scams this quarter, accounting for 29 percent of all attempts. Attackers not only frequently impersonate Microsoft, but they also use Microsoft\u2019s&nbsp;own tools&nbsp;to commit fraud.<\/p>\n\n\n\n<p>IC3 ( FBI&#8217;s&nbsp;Internet Crime Complaint Center) received 298,878 Phishing\/Spoofing in the year 2023 alone which caused a loss of approximately $18,728,550.<\/p>\n\n\n\n<p>Globally, <strong>323,972 internet users fell victim to phishing attacks in 2021<\/strong>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"fa-qs\">FAQs<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list \">\n<div id=\"faq-question-1694583737779\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">1. What are the main causes of phishing?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>The main causes of phishing can be attributed to a combination of technical vulnerabilities, human factors, and criminal motivations. Here are the main causes:<br \/><strong>Human Vulnerability<\/strong>: Phishing exploits the vulnerabilities of human psychology. Cybercriminals use persuasive tactics, urgency, and fear to manipulate individuals into taking actions such as clicking on malicious links, opening infected email attachments, or revealing sensitive information.<br \/><strong>Technical Vulnerabilities<\/strong>: Phishing attacks can take advantage of technical vulnerabilities, such as software or hardware flaws, to deliver malicious payloads.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1694583835078\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">2. How common are phishing attacks?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Phishing attacks are quite common and continue to pose a significant threat in the realm of cybersecurity. These attacks are widespread because they are relatively easy for cybercriminals to execute and can yield substantial rewards. Phishing attacks occur daily and target individuals, businesses, government agencies, and organizations across various industries and sectors. Phishing knows no geographical boundaries. Cybercriminals can launch phishing attacks from anywhere in the world, making them a global threat.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1694583878980\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">3. What type of phishing attack targets specific users or groups?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>A <a href=\"https:\/\/phishgrid.com\/blog\/types-of-phishing-attacks\/\">phishing attack<\/a> that targets specific users or groups is commonly referred to as \u201cspear phishing.\u201d Spear phishing is a highly targeted form of phishing in which cybercriminals customize their attacks for a specific individual, organization, or group of people. Unlike generic phishing attacks, which are sent to a large number of potential victims, spear phishing attacks are personalized and often more convincing. Here are some key characteristics of spear phishing:<br \/><strong>Targeted Victims<\/strong>: Spear phishing attacks focus on specific individuals or groups, often based on information gathered about the target. The attackers research their victims, gathering details from social media, company websites, or other sources to make the phishing attempt more convincing.<br \/><strong>Personalization<\/strong>: <a href=\"https:\/\/phishgrid.com\/blog\/spear-phishing\/\">Spear phishing emails<\/a> are carefully crafted to appear as though they come from a trusted source, such as a colleague, manager, or a known business partner.<br \/><strong>Social Engineering<\/strong>: Spear phishing relies heavily on <a href=\"https:\/\/phishgrid.com\/blog\/social-engineering-penetration-testing\/#what-is-social-engineering\">social engineering<\/a> tactics to manipulate the target\u2019s emotions, trust, or curiosity.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1694584050358\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">4. Where is phishing most common?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Phishing is a global cybersecurity threat, and it occurs worldwide. Cybercriminals target individuals and organizations across geographical boundaries, making it difficult to pinpoint specific regions as the sole or most common location for phishing attacks.<br \/><strong>High Internet Penetration<\/strong>: Regions with high Internet penetration rates tend to experience more phishing attacks because there are more potential victims online. Developed countries and urban areas often have higher internet penetration rates.<br \/><strong>Large Population Centers<\/strong>: Cybercriminals often target densely populated areas with a higher concentration of potential victims. Major cities and metropolitan areas may see more phishing attacks compared to rural regions.<br \/><strong>Cultural and Language Factors<\/strong>: Phishing attacks often use social engineering tactics that exploit cultural norms and language proficiency. Some phishing campaigns are more effective when they target specific cultural or linguistic groups.<br \/>\u00a0<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>What is every hacker&#8217;s weekend getaway? They go&nbsp;phishing&#8230; A In an increasingly digital world, where information flows freely and transactions occur at [&hellip;]<\/p>\n","protected":false},"author":114,"featured_media":4726,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[22],"tags":[],"class_list":["post-4172","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-phishing"],"_links":{"self":[{"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/posts\/4172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/users\/114"}],"replies":[{"embeddable":true,"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/comments?post=4172"}],"version-history":[{"count":29,"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/posts\/4172\/revisions"}],"predecessor-version":[{"id":6792,"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/posts\/4172\/revisions\/6792"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/media\/4726"}],"wp:attachment":[{"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/media?parent=4172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/categories?post=4172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/phishgrid.com\/wp-json\/wp\/v2\/tags?post=4172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}