- Global phishing incidents decreased by 20% in 2024, but cybercriminals are leveraging AI for more targeted assaults on critical business operations.
- Emerging markets like Brazil, Hong Kong, and the Netherlands are experiencing a rise in phishing activity.
- Platforms such as Telegram, Steam, and Facebook are heavily targeted for phishing and malware distribution.
Zscaler, Inc. (ZS, Financial) has unveiled its 2025 Phishing Report, revealing significant insights into the evolving landscape of cyber threats. Despite a 20% decrease in global phishing attempts in 2024, the report highlights a troubling shift towards more precise and sophisticated attacks. Cybercriminals are increasingly exploiting Generative AI to target high-impact business functions, including IT, HR, finance, and payroll teams.
The report, which analyzed over 2 billion blocked phishing attempts, notes a significant 32% drop in phishing cases in the U.S. However, emerging markets such as Brazil, Hong Kong, and the Netherlands have seen an uptick in attempts, attributed to the disparity between rapid digital adoption and slower security investment. Popular platforms like Telegram, Steam, and Facebook are being exploited as primary vectors for phishing attacks and malware delivery.
Noteworthy findings from the report show that cybercriminals are leveraging advanced AI techniques to craft convincing phishing lures, fake websites, and deepfake content aimed at social engineering attacks. Additionally, there was a noted increase of over 159 million tech support scam attempts in 2024, preying on users through various community platforms.
Deepen Desai, CSO and Head of Security Research at Zscaler, emphasized the critical need for organizations to adopt AI-powered defenses alongside a Zero Trust strategy to combat these sophisticated threats. Zscaler's Zero Trust Exchange platform remains at the forefront of protecting enterprises by minimizing the attack surface, preventing initial compromises, and stopping data loss.
To explore detailed insights and emerging threat trends, the full Zscaler ThreatLabz 2025 Phishing Report is available for download. This comprehensive report provides actionable strategies for organizations to strengthen their defenses against this dynamic threat landscape.
