Phishing attacks
Photo by Mikhail Nilov on Pexels.com

Phishing attacks rose 61% in 2022, new study finds

The cybercrime commonly called “phishing” soared 61% in the past year to more than 1 million attacks and continues to pose a significant threat to most Internet users, according to an annual study from Interisle Consulting Group, specialists in business and technology strategy and authors of a long-running series of reports on phishing activity.

Phishing attacks lure victims, typically via email or text message, to a fraudulent website that appears to be run by a trusted entity, often a bank or retailer. The site is designed to persuade a victim to provide sensitive information like a bank account number.

ProtonVPN, Proton, VPN

Why use a VPN

SECURITY: Our secure VPN sends your internet traffic through an encrypted VPN tunnel, so your passwords and confidential data stay safe, even over public or untrusted Internet connections.

PRIVACY: Keep your browsing history private. As a Swiss VPN provider, we do not log user activity or share data with third parties. Our anonymous VPN service enables Internet without surveillance.

FREEDOM: We created ProtonVPN to protect the journalists and activists who use ProtonMail. ProtonVPN breaks down the barriers of Internet censorship, allowing you to access any website or content.

For its study, entitled Phishing Landscape 2022: An Annual Study of the Scope and Distribution of Phishing, Interisle assembled and analysed a deep and reliable dataset by collecting more than three million phishing reports from May 1, 2021 through April 30, 2022 from four respected threat intelligence providers: the AntiPhishing Working Group (APWG), OpenPhish, PhishTank, and Spamhaus, and examined data from 2020 for a longer-term examination of certain issues. The report also includes Interisle’s recommendations on measures to stop the practice.

Over 1 million unique phishing attacks

Interisle’s study has drawn praise from experts on the topic. “This thoroughly researched report is essential reading for anyone concerned about the growing threat of online phishing,” said John Levine, president of the Coalition Against Unsolicited Commercial Email (CAUCE). “It has detailed analyses and advice on what and where the threats are, and how we can and must deal with them.”

Interisle’s study found the 3 million reports represented 1,122,579 unique phishing attacks during that time frame, with 853,987 domain names reported for phishing, a 72% increase over the previous year’s study.

One notable finding: Phishing attempts related to cryptocurrency increased 257% year to year. Nearly 80% of the generic top-level domains (gTLD) reported for phishing were maliciously registered, and crypto wallets were the most targetted brands.

“Cryptocurrency phishing has skyrocketed, especially attacks involving wallets and exchanges,” said Interisle partner and co-author Dave Piscitello. “Phishers are applying attack techniques that they’ve used against other financials to virtual currencies with great effect.”

Screenshot 2022 06 22 095145

LifeLock by Norton

Sign Up

It only takes a few minutes to enroll.

We Scan

We look for threats to your identity.

We Alert

We alert you of potential threats by text, email, phone or mobile app.

We Resolve

If you become a victim of identity theft, a U.S.-based Identity Restoration Specialist will work to fix it.

We Reimburse

We’ll reimburse funds stolen due to identity theft up to the limit of your plan.†††

In other findings:  

  • The number of monthly attacks has doubled in two years, from about 40,000 in May 2020 to more than 100,000 in April 2022.
  • Phishers targetted over 2,000 businesses and organisations during the May 1, 2021 to April 30, 2022 period. The majority of phishing attacks targeted just 10 brands.
  • A small number of registrars dominate malicious domain registration in some TLDs (top-level domains). In four TLDs, more than 80% of the malicious domains were registered through just one registrar.
  • Phishing attacks are disproportionately concentrated in new gTLDs. While the new TLDs’ market share decreased during the yearly reporting period, phishing among the new TLDs has increased.
  • Phishers deliberately registered 69% of all domains—and 92% of new gTLD domains—on which phishing occurred.
  • Phishers have begun targetting more brands, including Amazon, Apple, Meta (Facebook, WhatsApp) and Microsoft (Outlook).

Interisle’s report also includes observations and recommendations to counter phishing attacks, including: 

  • The naming, addressing, and hosting ecosystem exploited by phishers (and cyberattackers generally) is encumbered by vertically isolated (“siloed”) policy and mitigation regimes.
  • Registries and registrars should identify, “lock”, and suspend domains reported for phishing, and hosting and cloud service providers should remove phishing content or shut down accounts where phishing occurs, and all parties should be more responsive to abuse complaints, especially for cybercrimes such as phishing, and they must begin to do so in a more coordinated and determined manner.
  • Changes to or introduction of policy or regulation may be necessary to effectively mitigate phishing. Obliging operators to validate the identity of users and customers, coupled with agreement on a common definition of lawful access that acknowledges the role that the private sector plays in combatting cybercrime, could reduce both the incidence of phishing attacks and the difficulty of responding to it.

For more about Interisle, please visit: https://www.interisle.net.

About Interisle

Interisle’s principal consultants are experienced practitioners with extensive track records in industry and academia and world-class expertise in business and technology strategy, Internet technologies and governance, financial industry applications, and software design. Every Interisle client benefits from the direct hands-on management of this core team, augmented by the specialised expertise of an extensive network of associates—a coherent, team approach with the low overhead of a lean, virtual organisation.

Contact Information
Dave Piscitello
dave@interisle.net

– Globe Newswire, New York

_________________________________

PS5

Every month in 2022 we will be giving away one PlayStation 5. To qualify like us on Facebook and Subscribe to our Sweet TnT Magazine YouTube channel

When you buy something through our retail links, we may earn commission and the retailer may receive certain auditable data for accounting purposes.

Dark Web: How to fight back as cybercrime evolves

How recruiters handle cybersecurity threats

The importance of cybersecurity in mobile banking

Best Class Data Privacy and Data Security for Testing Solutions offered by Sauce Labs

6 Best HEIC to JPG Converter for Windows and Mac

Delphix new appliances provide continuous data protection, advanced TDM

Click fraud: Advertisers warned not to rely on IP blocking

Click fraud refund: Advertisers get help with Polygraph

Hybrid working exposes businesses seriously to insider fraud

274112816 4992934554097058 7084780429121987566 n

LEDGER

NANO X COINBASE EDITION

Ledger has joined forces with Coinbase to offer secure self custody to Coinbase Wallet users.

What does this mean concretely? Well, the Coinbase Wallet browser extension now supports Ledger hardware wallets, meaning that you can use Coinbase with the security of Ledger.

About Sweet TnT

Check Also

Dark Web

Dark Web: How to fight back as cybercrime evolves

New HP Wolf Security report exposes ironic “honour among thieves” as cybercriminals rely on dispute …

Fuel guage in Toyota Corolla for fuel efficient car.

10 Easy ways to make your car fuel efficient

It is expected that sometime in the not too distant future the fuel subsidy that …

%d bloggers like this: