The top phishing keywords in the last 10k+ malicious emails we investigated

This report summarizes an analysis of the top subject-line keywords observed across 10,000 malicious/phishing emails—highlighting terms like "Invoice", "New", "Message", "Required", "File", "Document", "Verification", "eFax" and voicemail-related cues—that attackers use to blend in with legitimate business traffic and create urgency to prompt action. It includes example subject lines, explanations of attacker intent, and prioritized mitigations (phish-resistant MFA, phishing education and testing, disabling legacy protocols, and conditional access) to reduce successful credential-harvesting and BEC incidents.