Skip to Main Content
PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Beware: Phishing Attacks Are on the Rise

Eighty-three percent of information security professionals recently polled by Proofpoint said they experienced phishing attacks last year, up from 76 percent who said the same in 2017.

By Angela Moscaritolo
January 29, 2019
Proofpoint phishing

Be on guard, internet: Phishing cyberattacks and other social engineering exploits such as "vishing" (voice phishing) and "smishing" (SMS/text phishing), are on the rise, according to new data from cybersecurity firm Proofpoint.

The Why Axis Bug

For its fifth annual State of the Phish Report, released Thursday, the cybersecurity firm polled around 15,000 information security professionals around the world about their views of the threat landscape and experiences with phishing. Almost all of them (96 percent) said the rate of phishing attacks remained the same or increased in 2018.

Eighty-three percent of respondents said they experienced phishing attacks last year, up from 76 percent who said the same in 2017. Around half (49 percent) experienced vishing and/or smishing, up from 45 percent a year earlier, and 4 percent faced USB-based social engineering attacks via infected thumb drives, up from 3 percent.

Proofpoint also found that spear-phishing attacks, which target a specific individual or organization, are becoming more prevalent. Sixty-four percent of respondents faced these highly-targeted attacks last year, up from 53 percent in 2017.

Proofpoint spear phishing

"Email is the top cyberattack vector, and today's cybercriminals are persistently targeting high-value individuals who have privileged access or handle sensitive data within an organization," Proofpoint General Manager of Security Awareness Training Joe Ferrara said in a statement. "As these threats grow in scope and sophistication, it is critical that organizations prioritize security awareness training to educate employees about cybersecurity best practices and establish a people-centric strategy to defend against threat actors' unwavering focus on compromising end users."

To learn more, you can download Proofpoint's full report.

Meanwhile, if you're wondering how susceptible you are to falling victim to phishing, a new quiz from Jigsaw, a company under Google's parent Alphabet, can help you find out. The quiz presents you with eight example emails, and you have to determine whether they're phishing attacks or legitimate.

Like What You're Reading?

Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.


Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

Sign up for other newsletters

TRENDING

About Angela Moscaritolo

Managing Editor, Consumer Electronics

I'm PCMag's managing editor for consumer electronics, overseeing an experienced team of analysts covering smart home, home entertainment, wearables, fitness and health tech, and various other product categories. I have been with PCMag for more than 10 years, and in that time have written more than 6,000 articles and reviews for the site. I previously served as an analyst focused on smart home and wearable devices, and before that I was a reporter covering consumer tech news. I'm also a yoga instructor, and have been actively teaching group and private classes for nearly a decade. 

Prior to joining PCMag, I was a reporter for SC Magazine, focusing on hackers and computer security. I earned a BS in journalism from West Virginia University, and started my career writing for newspapers in New Jersey, Pennsylvania, and West Virginia.

Read Angela's full bio

Read the latest from Angela Moscaritolo