92% of Organizations Hit by Credential Compromise from Social Engineering Attacks
A report by Barracuda reveals that 92% of organizations experienced credential compromises due to email-based social engineering attacks in 2023, averaging six incidents per organization. The attacks mainly involved phishing (86%), conversation hijacking (0.5%), business email compromise (10.6%), and extortion (2.7%). Attackers frequently used legitimate services like Gmail (22%) and URL shortening services (bit.ly, 40%). A significant rise in QR code phishing attacks was also noted, targeting users' personal devices.
Comments