APWG：2024年第一季度网络钓鱼活动趋势报告英文版 .docxVIP

PHISHINGACTIVITYTRENDSREPORT

1stQuarter2024

Unifyingthe

GlobalResponse

ToCybercrime

ActivityJanuary-March2024

Published14May2024

PhishingActivityTrendsReport,1stQuarter2024

PhishingReportScope

TheAPWGPhishingActivityTrendsReportanalyzesphishingattacksandotheridentitythefttechniques,asreportedtotheAPWGbyitsmembercompanies,itsGlobalResearchPartners,throughtheorganization’swebsiteat,andbye-mailsubmissionstoreportphishing@.APWGmeasurestheevolution,proliferation,andpropagationofidentitytheftmethodsbydrawingfromtheresearchofourmembercompaniesandindustryexperts.

PhishingDefined

Phishingisacrimeemployingbothsocialengineeringandtechnicalsubterfugetostealconsumers’personalidentitydataandfinancialaccountcredentials.Socialengineeringschemespreyonunwaryvictimsbyfoolingthemintobelievingtheyaredealingwithatrusted,legitimateparty,suchasbyusingdeceptiveemailaddressesandemailmessages.ThesearedesignedtoleadconsumerstocounterfeitWebsitesthattrickrecipientsintodivulgingfinancialdatasuchasusernamesandpasswords.Technicalsubterfugeschemesplantmalwareontocomputerstostealcredentialsdirectly,oftenusingsystemsthatinterceptconsumers’accountusernamesandpasswordsormisdirectconsumerstocounterfeitWebsites.

Phone-basedPhishingGrowingUnchecked

Littlerecordedjustafewyearsago,phonenumbersusedforfraudcomprisedmorethan20%offraud-relatedassetsseenbyOpSecinitslatestreport

PhishingActivityTrendsSummary

· Phone-basedphishing,directlyengagingvictims,proliferatesunchecked.Phonenumbersusedforfraudcomprisedmore

TableofContents

StatisticalHighlights 3

Most-TargetedIndustrySectors 5

Phone-BasedPhishing 6

BusinessEmailCompromise 7

APWGPhishingTrendsReportContributors 10

AbouttheAPWG 11

than20%offraud-relatedassetsidentifiedbyOpSecinQ12024.[p.6]

· Phishingusingphon