

This document is a report detailing the trends in phishing and malware attacks for the third quarter of 2023. It outlines a significant increase in phishing and malware incidents, with phishing volumes rising by 173% compared to the previous quarter, totaling 493.2 million emails. Malware volumes also saw a notable increase of 110%, reaching 125.7 million emails. August was identified as the most active month for phishing, with over 207.3 million phishing emails sent. The report highlights that Facebook and Microsoft remain the top impersonated brands, with Facebook experiencing a 104% increase in phishing URLs. Additionally, Bank of America saw a dramatic rise in phishing URLs, increasing nearly ninefold. The report also discusses various phishing tactics targeting Microsoft 365 users, including QRishing attacks and HTML smuggling techniques for malware distribution. Overall, email continues to be the primary vector for these cyber threats, emphasizing the need for robust email security solutions.