Phishing scams increased by 118% during Thanksgiving.

Phishing attacks rose by 21% in 2025

There was a 229% spike in phishing scams on Black Friday.

55% of people receive scam text messages weekly.

77% of Chief Information Security Officers identified AI-generated phishing as a serious and emerging threat in 2025

27% of people are targeted by scam text messages daily.

71% of Japanese respondents identified phishing as the top threat facing their organization, significantly higher than the global average.

25% of the top 20 attachments opened in simulated phishing emails were Word documents.

PDFs comprised 56% of the top 20 attachments opened in simulated phishing emails.

Phone-based vishing attacks increased by 449% in 2025 compared to 2024, with phone numbers appearing as the sole payload in 5.5% of phishing emails.

In 2025, cybercriminals increased their abuse of legitimate platforms like QuickBooks, Zoom, SharePoint, and PayPal by 67% year-to-date.

70% of simulated landing page interactions involve branded content.

In 2025, 77% of callback numbers used AI-generated voices, while 69% of vishing attacks were financially motivated, requesting bank detail changes, fraudulent refunds, or transfers.

25% of branded content interactions in simulated phishing emails involved Microsoft between July 1, 2025, and September 30, 2025.

45% of the top 10 most-clicked simulated phishing emails referenced HR between July 1, 2025, and September 30, 2025.

66% of simulated phishing emails utilized domain spoofing techniques.

82% of the top 20 clicked links in simulated phishing emails came from internally themed simulations between July 1, 2025, and September 30, 2025.

19% of the top 20 attachments opened in simulated phishing emails were HTML files.

90% of the most-clicked subject lines in simulated phishing emails reference internal topics.

28% of breaches in 2025 were initiated through phishing or social engineering.