Yazılım Kulübü

Phishing Statistics – What are the most recent phishing statistics in 2020? In this blog, we are going to explain the latest phishing statistics you need to know to protect your organisation.

2020 was a significant year regarding cyber-attacks. These attacks brought losses resulting in hundreds of millions of dollars at a global level.  Since they have grown, it has been critical for businesses to evaluate and see the risks with phishing facts and figures. Therefore we have gathered some phishing statistics and information on their impact.

2020 Phishing Statistics You Need To Know To Protect Your Organisation

1. Phishing is the first delivery method for other types of malicious software. A phishing attack isn’t just targeted at gaining information. Phishing attacks can also be used to distribute malicious programs, such as ransomware. Email attachments are still the main method of delivery for malicious programs. ¹
2. 97% of users cannot identify a sophisticated phishing email. ²
3. According to the SANS Institute, 95% of all attacks on enterprise networks are the result of successful spear phishing. ³

4. According to phishing stats in Keepnet Labs 2020 Phishing Trends Report, employees in departments that handle large-scale data have problems in recognizing phishing emails. ⁴

5. Only 3% of users report phishing emails to their management.⁵

6.  A single spear-phishing attack costs an average of $1.6 million. ⁶

7. According to the 2018 Verizon Data Breach Investigations Report’s Phishing Statistics, 30% of phishing messages are opened by targeted users, and 12% of those users click on the malicious attachment or link.⁷
8. 85% of organisations have suffered from phishing attacks. These attacks are everywhere, and most organisations will encounter them at one point or another. ⁸
9. According to Symantec, phishing rates have increased across most industries and organisation sizes; no company or vertical is immune. ⁹
10. According to  Lookout, Phishing is both different and more problematic on the mobile device. ¹⁰
11. According to a report by Wandera 81%, mobile phishing attacks were initiated outside of email. ¹¹
12. According to the Webroot Threat Report, nearly 1.5 million new phishing sites are created each month.¹²
13. The number of phishing emails containing a form of ransomware grew to 97.25% since 2016. ¹³
14. According to FAU researchers, 78% of people claim to be aware of the risks of unknown links in emails. And yet they click anyway. ¹⁴
15. The worldwide information security market is forecast will be reaching to  $170.4 billion in 2022 ¹⁵
16. In the first half of 2020, there were 540 reported data breaches in the USA ¹⁶
17. 83% of businesses will move to the cloud by the year 2020. ¹⁷
18. Saas and webmail services accounted for 34.7 % of phishing attacks internationally.  ¹⁸
19. According to Keepnet’s latest Phishing Statistics, 8 in 1 employee share the information to phishing web sites. ¹⁹
20. Over 60,000 phishing websites reported in March 2020 alone.²⁰
21. 96% of all targeted attacks are developed for intelligence-gathering. ²¹
22. 71% of sextortion victims are under the age of 18. ²²
23. Apple was the brand that was used by criminals. ²³
24. Brand impersonation is 83 % of spear phishing attacks. ²⁴
25. Sextortion attacks involve 1 in 10 spear-phishing emails.  ²⁵
26. Finance department employees are targeted due to their access to sensitive data like banking ²⁶
27. 1 in 2 organizations was targeted by ransomware in 2019 and attackers have successfully encrypted the data in 73% of these attacks. ²⁷
28. In 2020, the average ransom demand is $84,000 and  1 in 3 companies pay the ransom. ²⁸
29. 2 in 1 SMEs have been targeted by Ransomware. ²⁹
30. According to Verizon’s 2020 Data Breach Investigation Report, phishing is one of the top threat action variety in data breaches that 22 percent of data breaches involving phishing attacks today. ³⁰

Phishing attacks are trending upwards since many enterprises encounter phishing attacks every day. A single phishing attack can cost a company millions of dollars. Therefore by seeing these facts, users should work to deepen their security awareness by familiarizing themselves with the signs of phishing attacks. It is also critical for businesses to evaluate their employees’ actions against phishing attacks with statistical values. They should make phishing simulations regularly to see employees’ behaviour.

“This post is originally published at www.keepnetlabs.com”