Over 400 million E -unwanted and malicious emails were received by companies in 2024

The report finds the Bypass 2FA reverse proxy attacks, exploiting confidence in fake authentication
Phishing remains dominant, representing one third of all attacks
The badly intentional URLs, comprising 22.7% of Cyberattack strategies

Cybercriminal continuously evolves its tactic, and E -Email remains a main vector for attacks, new research from Hornetsecurity emphasizing more alarming trends, including the growth of evil -intentional emails and sophisticated tactics of accreditation theft.

In 2024, businesses around the world received 20.5 billion E -mail, of which an amazing 36.9% were not unwanted. Alarmingly, 2.3% of these – 427.8 million – contained malicious content.

Phishing attacks represented one third of all cyber attacks, emphasizing the continuous challenge of protecting the organizations from misleading social engineering.

Increasing the credential with proxy reverse

The malicious attachments recorded a decrease although a new threat, reverse Proxy The theft of accreditation, is in progress,

These sophisticated attacks use socially intentional social engineering and ties, rather than attachments to the cheating of users. The victims are redirected to false login pages that mimic reliable sites, capturing the real -time credentials.

Remarkably these methods can bypass with two factors Authentication applications (2fa). Tools such as Evilginx allow attackers to create false connecting portals, which makes it easier to steal sensitive information. The malicious URLs now represent 22.7% of the attacks, reflecting a significant increase from 2023.

The report shows a decrease in the general threat index for most industries, compared to 2023. However, the targeted attacks persist in all sectors, mining, entertainment and manufacturing as high risk industries.

Ransomware Double-exit attacks and scams are particularly widespread in these areas. The imposition of the brand also remains a popular tactic among the cybernetic. Maritime transport companies such as DHL and FedEx were the most impersonated brands, while Docusign, Facebook, Mastercard and Netflix saw more than double attempts compared to 2023.

In order to counteract these attacks, organizations must implement advanced email filtration systems, adopt authentication mechanisms with multiple layers resistant to 2FA bypassing and give priority to employees. Training courses in the field of cybersecurity to recognize phishing tactic.

“These discoveries highlight both progress and new challenges in the fight against cyber threats,” said Daniel Hofmann, CEO Hornetsecurity.

“Although it is encouraging to see some consistency in the methods of attack, for defensive purposes, the change to more targeted social engineering tactics means that enterprises must remain vigilant. With over 427 million intentional E -emails that still reach inboxes, it is clear that the strategies of Cibersecurita must remain for what is to remain in the threat. sophisticated. ”

“In 2025, organizations must give priority to basic security practices and include a zero trust mentality to address vulnerabilities and to favor a strong security culture.”

“The construction of a well-defended business is not possible without hiring everyone-what understands how they are involved in personally affecting them personally and why their role is essential to maintain the threats in empty. Working with reliable sellers, companies not only can protect themselves, but also in knowledge of experts.”