Top Five Industries Most Frequently Targeted by Phishing Attacks

This report analyzes phishing campaigns from Q3 2023 to Q3 2024 that target finance, insurance, manufacturing, mining/oil & gas, and healthcare, highlighting attackers’ use of customized subject lines containing PII and subject redaction to bypass defenses. It observes correlations between email themes and threat actors, seasonal fluctuations in activity, and the dominance of .HTM/.HTML and .DOC/.DOCX attachments that mimic legitimate content and often embed recipient data to facilitate credential theft, underscoring the need for robust email security controls.