Every third phishing attack is carried out under the name of Microsoft

January 15, 2024

Check Point Research (CPR) has recently announced its latest Brand Phishing Report, where they review and analyze which brands were most vulnerable to phishing attacks in the fourth quarter of 2023. These attacks are aimed at gaining access to personal information and banking details by impersonating another person or organization.

Last quarter saw a return of Microsoft as the most imitated brand, accounting for a whopping 33 percent of all phishing attacks. Tech giants dominated the list, with Amazon coming in second place with 9 percent and Google coming in third with 8 percent. Interestingly, it wasn’t just the familiar social media brands that were media and banks who were targets for phishers, but also courier companies like DHL, likely due to the increased demand during the last months of the year.

The top list of the most used brands for phishing in the fourth quarter of 2023 is presented as follows:

Microsoft (33%)
Amazon (9%)
Google (8%)
Apple (4%)
Wells Fargo (3%)
LinkedIn (3%)
Home Depot (3%)
Facebook (3%)
Netflix (2%)
DHL (2%)

A typical phishing attack in the name of Microsoft usually involves an email message sent in which cybercriminals pretend to be associated with Microsoft user accounts. Recipients are asked to click on a link to verify their email addresses and thereby ensure that they can continue using Microsoft services. However, these links do not lead to official pages, but to counterfeit copies that allow the theft of sensitive information.

Mats Ekdahl, Security expert at Check Point Software, emphasizes the importance of being vigilant to avoid falling victim to these attacks. He recommends that users carefully review the text of emails, links, and email addresses for possible spelling errors. Companies can also protect themselves by implementing effective security technology that blocks phishing attempts, thereby minimizing the risk of employees being scammed. Being critical and reviewing before clicking on links is of utmost importance to prevent such attacks and ensure a safe digital environment.