In attachment-based campaigns, people were most likely to open certain file types: PDFs (53%), HTML files (28.5%), Word files (18.5%).

PDF attachments are used in 36% of phishing attacks as favoured attachments

SVG files are used in 34% of phishing attacks as favoured attachments.

Callback phishing accounted for 16% of phishing attempts in Q1 2025.

People were more likely to click on links related to internal topics or impersonating known brands, accounting for 61.6% of clicks.

Smishing attacks grew by 22%.

60.7% of the phishing simulations that were clicked mentioned an internal team.

Vishing (voice-call phishing) tactics grew by 28%.

Despite regularly experiencing malware and phishing incidents, 90% of respondents expressed confidence in their organizations' security measures.

"More than half" of the organizations surveyed confirmed they regularly experienced malware and phishing incidents.

"More than half" of the organizations surveyed confirmed they regularly experienced malware and phishing incidents.

Small and medium-sized retailers saw significant declines in phishing susceptibility due to training, dropping from 29.3% to 3.7% for small retailers and from 33.3% to 4.2% for medium-sized retailers

The FBI received 193,407 complaints about phishing/spoofing in 2024 (versus 298,878 in 2023 and 321,136 in 2022).

94% of energy firms are pushing to adopt AI-driven cybersecurity due to revenue losses and disruptions caused by ransomware and phishing.

Security awareness training has significantly reduced phishing susceptibility in large energy organisations, dropping from 47.8% to 4% in one year.

Social Engineering was the second-most common incident pattern in the region, with phishing appearing in 19% of breaches in EMEA.

Phishing was behind 34% of attacks reported in the energy sector.

The number of infostealers delivered via phishing emails per week increased by 84% year-over-year.

Malicious ZIP and RAR attachments in phishing emails dropped by 70% and 45% respectively

The share of successful phishing compromises has declined steadily from 46% in 2022 to 29% in 2023 to now just 25% of all incidents remediated by X-Force in 2024.