Microsoft most exploited in phishing – but now they are joined by Spotify

July 22, 2025

The IT security company Check Point Software has released his Brand Phishing Report for the second quarter of 2025. Microsoft retains the top spot, with 25 percent of all phishing attacks claiming to come from the company. Spotify makes an unexpected comeback, coming in fourth place with six percent.

Phishing continues to be the dominant tool in the cybercriminal arsenal. In the second quarter of 2025, these actors intensified their attempts to impersonate some of the world’s most trusted brands – the ones that millions of people rely on every day. From tech giants to streaming services, no brand is safe from being counterfeited.

In one of the most eye-catching campaigns of the quarter, cybercriminals to impersonate the music streaming service Spotify. Via a fake website tricked cybercriminals users to provide their login details. The fake website mimicked Spotify's official website where victims were asked to provide usernames and passwords, where they were later redirected to a fake payment page that also attempted to steal credit card details.

This campaign marks Spotify's first top spot since Q4 2019 – underscoring how streaming services are being leveraged as aggressively as technology platforms.

“In addition to now seeing streaming platforms like Spotify being increasingly aggressively exploited, the technology sector continues to be the primary target in phishing campaigns,” says Oskar Rodin, security expert at Check Point SoftwarePlatforms like Microsoft 365, Gmail, and iCloud are central to our digital lives, and cybercriminals see these brands as keys to sensitive data.