Microsoft most exploited in phishing – but now they are joined by Spotify

The IT security company Check Point Software has released his Brand Phishing Report for the second quarter of 2025. Microsoft retains the top spot, with 25 percent of all phishing attacks claiming to come from the company. Spotify makes an unexpected comeback, coming in fourth place with six percent.

Phishing continues to be the dominant tool in the cybercriminal arsenal. In the second quarter of 2025, these actors intensified their attempts to impersonate some of the world’s most trusted brands – the ones that millions of people rely on every day. From tech giants to streaming services, no brand is safe from being counterfeited.

In one of the most high-profile campaigns of the quarter, cybercriminals posed as music streaming service Spotify. Via a fake website, cybercriminals tricked users into providing their login details. The fake website mimicked Spotify's official website where victims were asked to provide usernames and passwords, where they were later redirected to a fake payment page that also attempted to steal credit card details.

Read Also

Microsoft most common in phishing – and LinkedIn makes a comeback

January 30, 2025

Every third phishing attack is carried out under the name of Microsoft

January 15, 2024

This campaign marks Spotify's first top spot since Q4 2019 – underscoring how streaming services are being leveraged as aggressively as technology platforms.

“In addition to now seeing streaming platforms like Spotify being increasingly aggressively exploited, the technology sector continues to be the primary target in phishing campaigns,” says Oskar Rodin, security expert at Check Point SoftwarePlatforms like Microsoft 365, Gmail, and iCloud are central to our digital lives, and cybercriminals see these brands as keys to sensitive data.

Top 10 most imitated brands in the second quarter of 2025:

• Microsoft – 25%
• Google – 11%
• Apple – 9%
• Spotify – 6%
• Adobe – 4%
• LinkedIn – 3%
• Amazon – 2%
• Booking – 2%
• WhatsApp – 2%

Read the full report on Check Point's blog: https://blog.checkpoint.com/re…

Related Posts

Microsoft most common in phishing – and LinkedIn makes a comeback

IT security company Check Point Software presents its Brand Phishing Ranking, a list of which brands are most exploited by cybercriminals, for the last quarter of 2024. The goal of the phishing attacks

87.9% match January 30, 2025

Every third phishing attack is carried out under the name of Microsoft

Check Point Research (CPR) has recently published its latest Brand Phishing Report, in which they review and analyze which brands were most vulnerable to phishing attacks.

86.5% match January 15, 2024

Microsoft will remain the most exploited in phishing attacks in 2026 according to Check Point

22% of all phishing attacks target Microsoft. See which brands cybercriminals exploit the most, according to Check Point's new report.

79.6% match April 17, 2026

Next Up

Phishing Trends

Protect yourself against phishing

Phishing risk 2026

Stop Phishing Threats