Accessibility links

Facebook   X   LinkedIn   Email

New Report Finds Email Phishing is Out of Control—Are You Prepared?

November 3, 2025

A recent study of email phishing finds we have an even bigger target on our backs than we thought. Thanks to Barracuda’s 2025 Email Threats Report, we find out just how huge a security problem phishing is today. The cringe-worthy report spotlights how out of control email phishing has become, so if you have an email account, and who doesn’t, keep reading.

30 Malicious Emails Every Day

The report finds one out of four emails today are malicious or spam. Getting hammered by attackers is now an everyday reality since the average user gets about 121 emails a day. But among the 121 messages, about 30 are sent with bad intent. Overall, that’s a 24% malicious slice of your inbox, and Barracuda’s findings don’t stop there.

  • Nearly 25% of all HTML attachments are malicious and overall are the most weaponized files
  • 83% of malicious Microsoft 365 documents have QR codes linked to phishing websites
  • 68% of PDF attachments are malicious, also having QR codes linked to phishing sites

Be prepared

Since the report finds email phishing is blowing up, we all need to be ready for the “Battle Of The Inbox.” So much is at stake when our passwords and 2FA codes are stolen. Cyber crooks also hide malware and malicious links in the emails. Also at risk is our PII (personally identifiable information), financial account details, account takeovers, our identities, and so much more. 

Microsoft’s Outlook and Google’s Gmail are getting tough about email security and hopefully others will follow suit. Remember, no one is immune from this new surge in email phishing. If it’s one thing we can take away from Barracuda’s report, be prepared because the bad guys are coming for us all.


Account Takeover Fraud Steals Your Identity, Money, And More

Identity Theft

Account Takeover Fraud Steals Your Identity, Money, And More

With a significant swell in the number of those working from home, come the most historic levels of hacking the world has ever seen. Account takeover (ATO) fraud attacks have been growing yearly, accounting for much of the identity fraud-based financial losses to consumers and businesses. ATO fraud can lead to empty bank accounts and damaged reputations, and those recovering from an attack find it’s an expensive, time consuming, and frustrating task. READ FULL STORY
QR Code Phishing Scams Spike 587%

Scams & Phishing

QR Code Phishing Scams Spike 587%

It’s the latest form of email phishing to hit the headlines. Researchers at Check Point find QR code phishing scams, called “Quishing” were up a whopping 587% in just two months. Quishing is a phishing attack using emails to send a malicious QR code. And now this credential-stealing scam has grown into epic proportions. In our growing desire for instant information, QR codes and Quishing present a uniquely tempting challenge. Here’s what you need to know to help avoid Quishing. READ FULL STORY
Online Security Tips From The BBB

Your Security

Online Security Tips From The BBB

Champions of consumers that they are, the Better Business Bureau (BBB) posted a warning reminder on their website about some of the risky online scenario’s consumers face every day. Keeping cyber safety in the forefront of our online activities isn’t always easy, but it’s always possible to do. The BBB knows this and wants consumers to be aware of some of the latest cyber scams and just how truly slippery they can be. It’s well-worth heeding what the BBB has to say about cybercrime and how to avoid the pitfalls that every hacker hopes we fall into. READ FULL STORY
Phony Voicemail Links Steal Employee Credentials From Office 365 And Outlook Users

Scams & Phishing

Phony Voicemail Links Steal Employee Credentials From Office 365 And Outlook Users

Most of us know phishing emails and fake texts are a hacker’s calling card for stealing valuable PII. But recently, researchers at Zscaler cloud security sounded the alarm about an unusual malware campaign using voicemail-themed email phishing as the primary hook for cyberattacks. It’s only after Zscaler fell victim to this campaign that the company felt compelled to study it further. Zscaler finds this cybercrime targets employees in the U.S. using Microsoft Office 365 and the Outlook email service. READ FULL STORY