Email Threat Trends Report Q2 2025

This report provides an analysis of email-based threats observed in the second quarter of 2025. It outlines significant trends in cyberattacks, particularly focusing on the rise of human-centered attacks that leverage social engineering tactics. The report details the top sectors targeted by email attacks, with manufacturing and retail identified as the most affected industries. It discusses the evolution of phishing tactics, including the shift from traditional phishing kits to customized deployments. Callback phishing is highlighted as a notable method gaining traction, alongside Business Email Compromise (BEC) scams, which predominantly target executives in Scandinavian countries. The report emphasizes the importance of understanding these trends to inform cybersecurity strategies and investments. It concludes with insights into the most prevalent malware, Lumma Stealer, and the implications of these findings for organizations aiming to enhance their email security posture.