GITNUX MARKETDATA REPORT 2023

Must-Know Phishing Statistics [Recent Analysis]

Facts about this Market Data Report

IconJournalist involved: 2
IconCited by: 88
IconStatistics researched: 44

Highlights: The Most Important Phishing Statistics

  • Phishing accounted for 22% of all security incidents in 2020.
  • Google found 46,000 phishing websites in 2020.
  • Over 1.4 million new phishing websites are created every month.
  • Mobile users are three times more likely to fall for phishing scams.
  • Phishing attacks cost businesses $3.92 million on average.
  • 59% of IT professionals believe training fails to reduce phishing.
  • The average loss per phishing attack is estimated to be $4.6 million.
  • Phishing attacks increased by 220% during the first half of 2020 due to the COVID-19 pandemic.
  • 65% of US organizations experienced a successful phishing attack in 2019.

Table of Contents

Phishing is a major threat to businesses and individuals alike. It's estimated that phishing attacks cost organizations an average of $3.92 million per attack, with the global total reaching over $4.6 billion in 2020 alone. In this blog post, we'll be taking a look at some of the most recent statistics on phishing attacks from around the world - including how many arrive by email, which countries are targeted most often, what percentage of security incidents involve phishing attempts and more. Read on for all you need to know about these alarming figures.

The Most Important Statistics
96% of phishing attacks arrive by email.

This statistic is a stark reminder of the prevalence of phishing attacks, and serves as a warning to be vigilant when it comes to emails. It highlights the importance of being aware of the potential for malicious emails, and the need to take steps to protect yourself from them. It also serves as a reminder that phishing attacks are a real threat, and that they should not be taken lightly.

Phishing accounted for 22% of all security incidents in 2020.

This statistic is a stark reminder of the prevalence of phishing in today’s digital landscape. It highlights the need for organizations to take proactive steps to protect their networks and data from malicious actors. By understanding the scope of the problem, organizations can better equip themselves to combat phishing attacks and reduce the risk of a successful attack.

Phishing Statistics Overview

1 in 99 emails is a phishing attack.

This statistic is a stark reminder of the prevalence of phishing attacks in our digital world. It highlights the need for individuals and organizations to remain vigilant and take steps to protect themselves from these malicious attempts to steal sensitive information.

Google found 46,000 phishing websites in 2020.

This statistic is a stark reminder of the prevalence of phishing websites in 2020. It highlights the need for individuals and organizations to remain vigilant against phishing attacks and to take the necessary steps to protect themselves. It also serves as a warning that phishing is a serious threat that should not be taken lightly.

Over 1.4 million new phishing websites are created every month.

This statistic is a stark reminder of the sheer magnitude of the phishing problem. It highlights the sheer scale of the issue, with over 1.4 million new phishing websites being created every month. This is a worrying trend that needs to be addressed, as it shows that phishing is becoming an increasingly prevalent threat.

Mobile users are three times more likely to fall for phishing scams.

This statistic is a stark reminder of the importance of being vigilant when it comes to phishing scams. Mobile users are often more vulnerable to these scams due to the fact that they are often on the go and may not have the same level of security as a desktop or laptop computer. As such, it is essential that mobile users take extra precautions to protect themselves from phishing scams.

Phishing attacks cost businesses $3.92 million on average.

This statistic serves as a stark reminder of the financial burden that phishing attacks can impose on businesses. It highlights the need for organizations to take proactive steps to protect themselves from such malicious activity. By investing in the right security measures, businesses can help to reduce the risk of falling victim to a phishing attack and the associated financial losses.

59% of IT professionals believe training fails to reduce phishing.

This statistic is a stark reminder that, despite the best efforts of IT professionals, phishing remains a major threat. It suggests that the current methods of training and education are not enough to effectively combat the problem, and that more needs to be done to protect against phishing attacks.

The average loss per phishing attack is estimated to be $4.6 million.

This statistic serves as a stark reminder of the immense financial damage that phishing attacks can cause. It highlights the need for organizations to take proactive steps to protect themselves from such malicious activities. By investing in the right security measures, businesses can help to minimize the risk of becoming a victim of a phishing attack and the associated financial losses.

Phishing attacks increased by 220% during the first half of 2020 due to the COVID-19 pandemic.

This statistic is a stark reminder of the dangers posed by phishing attacks during the COVID-19 pandemic. It highlights the need for individuals and organizations to remain vigilant and take steps to protect themselves from these malicious attacks. It also serves as a warning to those who may be unaware of the risks associated with phishing and the potential consequences of falling victim to such an attack.

65% of US organizations experienced a successful phishing attack in 2019.

This statistic is a stark reminder of the prevalence of phishing attacks in the US. It highlights the need for organizations to take proactive steps to protect themselves from these malicious attempts to gain access to sensitive information. It also serves as a warning to individuals to be vigilant when it comes to their online security.

Conclusion

Phishing is a serious threat to businesses and individuals alike. The statistics presented in this blog post demonstrate the prevalence of phishing attacks, their targets, and how they have been impacted by the COVID-19 pandemic. Phishing emails are sent out en masse with malicious intent, making up 0.57% of all emails worldwide according to Verizon's Tami Erwin. In 2020 alone, phishing accounted for 22% of all security incidents reported by Risk Based Security and 15% targeted financial institutions as per APWG’s Q1 2021 report on cybercrime trends. Google found 46000 new websites related to phishings in 2020 while 1 in 99 emails was identified as a potential attack according to Avanan research data from 2019/2020 period . Mobile users were three times more likely than desktop users to fall victim due to lack of awareness or training which 43 percent target small business owners who can least afford it costing them an average $3 million dollars each year based on IBM’s Data Breach Investigations Report (DBIR). Microsoft Office products were most commonly impersonated representing 43 percent followed closely by 98 percent relying heavily upon social engineering tactics such as spoofing email addresses or creating fake login pages that look legitimate but actually steal user credentials when entered into them according Proofpoint UK State Of The Phish Report 2020 edition.. It is clear that organizations must take steps now towards better protecting themselves against these threats through employee education programs and other measures designed specifically for preventing successful attacks like those mentioned here today

References

0. - https://www.info.lookout.com

1. - https://www.infosecurity-magazine.com

2. - https://www.cisa.gov

3. - https://www.avanan.com

4. - https://www.riskbasedsecurity.com

5. - https://www.ibm.com

6. - https://www.proofpoint.com

7. - https://www.researchgate.net

8. - https://www.transparencyreport.google.com

9. - https://www.imperva.com

Frequently Asked Questions

Phishing is a form of online fraud where attackers attempt to deceive users into revealing sensitive information, such as usernames, passwords, or credit card details, by disguising themselves as trustworthy entities through email, phone calls, or text messages.
The most common types of phishing attacks include email phishing, spear phishing, whaling, vishing (voice phishing), and smishing (SMS phishing).
Red flags in a phishing attempt may include unexpected emails or messages, generic greetings, requests for sensitive information, urgent or threatening language, misspelled URLs or domain names, and mismatched links and email content.
To protect against phishing attacks, people should avoid clicking on suspicious links, verify the sender’s identity, enable multi-factor authentication, maintain updated anti-virus software, and educate themselves and their employees on phishing prevention best practices.
If you suspect that you have fallen victim to a phishing attack, you should immediately change your passwords, monitor your accounts for suspicious activity, report the incident to your organization’s IT department or your bank if personal, and report the phishing attempt to relevant authorities, such as the Anti-Phishing Working Group, Federal Trade Commission, or local law enforcement.
How we write these articles

We have not conducted any studies ourselves. Our article provides a summary of all the statistics and studies available at the time of writing. We are solely presenting a summary, not expressing our own opinion. We have collected all statistics within our internal database. In some cases, we use Artificial Intelligence for formulating the statistics. The articles are updated regularly. See our Editorial Guidelines.

Table of Contents

Free Test

Leadership Personality Test

Avatar Group
No credit card | Results in 10 minutes