The IT security company Check Point Software has released his Brand Phishing Report for the second quarter of 2025. Microsoft retains the top spot, with 25 percent of all phishing attacks claiming to come from the company. Spotify makes an unexpected comeback, coming in fourth place with six percent.
Phishing continues to be the dominant tool in the cybercriminal arsenal. In the second quarter of 2025, these actors intensified their attempts to impersonate some of the world’s most trusted brands – the ones that millions of people rely on every day. From tech giants to streaming services, no brand is safe from being counterfeited.
In one of the most high-profile campaigns of the quarter, cybercriminals posed as music streaming service Spotify. Via a fake website, cybercriminals tricked users into providing their login details. The fake website mimicked Spotify's official website where victims were asked to provide usernames and passwords, where they were later redirected to a fake payment page that also attempted to steal credit card details.
This campaign marks Spotify's first top spot since Q4 2019 – underscoring how streaming services are being leveraged as aggressively as technology platforms.
“In addition to now seeing streaming platforms like Spotify being increasingly aggressively exploited, the technology sector continues to be the primary target in phishing campaigns,” says Oskar Rodin, security expert at Check Point SoftwarePlatforms like Microsoft 365, Gmail, and iCloud are central to our digital lives, and cybercriminals see these brands as keys to sensitive data.
Top 10 most imitated brands in the second quarter of 2025:
- Microsoft – 25%
- Google – 11%
- Apple – 9%
- Spotify – 6%
- Adobe – 4%
- LinkedIn – 3%
- Amazon – 2%
- Booking – 2%
- WhatsApp – 2%
Read the full report on Check Point's blog: https://blog.checkpoint.com/re…
Swedish
Danish
Norwegian
Finnish
English
German
Dutch