Unveiled: Key Phishing Risks as Detailed in the KnowBe4 Report
In a recent report, KnowBe4, a leading cybersecurity company, has highlighted the rapid acceleration of innovation in phishing threats and defenses. The Phishing Threat Trends Report for the start of 2025, known as Vol 5, underlines the importance of both technical and human aspects for effective phishing defense.
According to Jack Chapman, KnowBe4's Senior Vice President of Threat Intelligence, cybercriminals are evolving their tactics in phishing campaigns. The report identifies the most impersonated brands, which include Microsoft, Docusign, Adobe, Paypal, and LinkedIn. As we move through 2025, these brands, along with others like Google Drive and Salesforce, will continue to be popular targets for phishing attacks.
The report also observes a significant increase in ransomware payloads, with a 22.6% rise noted compared to previous periods. Cybercriminals are increasingly leveraging ransomware and polymorphic campaigns to evade detection. In fact, the unprecedented scale of polymorphic phishing tactics is now present in 76.4% of all phishing campaigns.
One of the most concerning trends is the 57.9% increase in attacks being sent from compromised accounts that are getting through traditional detection. This suggests that cybercriminals are becoming more sophisticated in their methods, using compromised accounts to launch attacks.
Phishing hyperlinks, malware, and social engineering payloads getting through traditional detection have surged. Phishing hyperlinks have seen a 36.8% increase, malware a 20% increase, and social engineering tactics a 14.2% increase compared to the previous six months.
The report also emphasizes the need for a holistic approach that integrates technical defenses with human risk management for a robust security culture. A strong security culture starts with detection, but is reinforced by awareness, continuous education, and adaptive technology.
The report recommends that organizations prioritize the detection and prevention of phishing attacks, as well as the education of employees to recognise and respond appropriately to these threats. The Phishing Threat Trends Report, Vol 5, is available for download for those who wish to gain a deeper understanding of the current phishing landscape.
It is clear that the battle against phishing threats is an ongoing one, and organizations must stay vigilant and adaptive to protect themselves and their users. The report serves as a valuable resource for understanding the current state of phishing threats and the strategies that can be employed to combat them.
