February 21, 2018 By David Bisson 2 min read

Approximately 250 million phishing redirection attempts were detected by one security firm in 2017.

In Kaspersky Lab’s “Spam and Phishing in 2017” report, the security firm noted that 246,231,645 redirection attempts registered on its system last year — that’s over 91 million more attempts than the previous year. In total, phishers targeted 15.9 percent of Kaspersky Lab users in 2017.

Phishing Attempts and Spam on the Rise in 2017

The report revealed several techniques malicious actors used to enhance their chances of success. For example, scammers purchased free certificates for newly created fraudulent domains or compromised sites already protected by digital certificates. These tactics added legitimacy to their attack websites and helped lure in users. They also relied on punycode encoding, fake cryptocurrency wallets and social media fraud to phish unsuspecting users.

In addition to phishing attempts, scammers sent out a significant amount of spam mail. Kaspersky noted that spam made up more than half (56 percent) of global email traffic in 2017, which is 1.68 percent less than in 2016.

On a more granular level, small spam messages (2 KB and less) were 43 percent of the total, a drop of 18 percent over the previous year. Mail between 20–50 KB made up the second-largest proportion of spam at 21 percent, followed by 10–20 KB at 16 percent, 5–10 KB at 9 percent and 2–5 KB at 5 percent.

Exploiting the Cryptocurrency Craze

As with phishing, spammers incorporated cryptocurrencies into their malicious messages. This effort led to nonexistent seminars, fake cloud mining services and fabricated lottery schemes that included bitcoin and other digital currencies.

Darya Gudkova, spam analyst expert at Kaspersky Lab, predicted that users will see more cryptocurrency-themed email attacks featuring “more cryptocurrency diversity besides bitcoin” in 2018, as quoted by Infosecurity Magazine. She also noted that she expects to see an increase in pump-and-dump schemes.

This rise in phishing and spam attacks will further boost the volume of malicious messages, a number that reached 14.5 billion pieces of mail in 2017, according to AppRiver. As cybercriminals tactics evolve around the cryptocurrency craze and other emerging technologies, users will need to be more cautious than ever when opening unsolicited mail.

More from

X-Force Threat Intelligence Index 2024 reveals stolen credentials as top risk, with AI attacks on the horizon

4 min read - Every year, IBM X-Force analysts assess the data collected across all our security disciplines to create the IBM X-Force Threat Intelligence Index, our annual report that plots changes in the cyber threat landscape to reveal trends and help clients proactively put security measures in place. Among the many noteworthy findings in the 2024 edition of the X-Force report, three major trends stand out that we’re advising security professionals and CISOs to observe: A sharp increase in abuse of valid accounts…

How I got started: Cyber AI/ML engineer

3 min read - As generative AI goes mainstream, it highlights the increasing demand for AI cybersecurity professionals like Maria Pospelova. Pospelova is currently a senior data scientist, and data science team lead at OpenText Cybersecurity. She also worked at Interest, an AI cybersecurity company acquired by MicroFocus and then by OpenText. She continues as part of that team today.Did you go to college? What did you go to school for?Pospelova: I graduated with a bachelor’s degree in computer science and a master’s degree…

Europe’s Cyber Resilience Act: Redefining open source

3 min read - Amid an increasingly complex threat landscape, we find ourselves at a crossroads where law, technology and community converge. As such, cyber resilience is more crucial than ever. At its heart, cyber resilience means maintaining a robust security posture despite adverse cyber events and being able to anticipate, withstand, recover from and adapt to such incidents. While new data privacy and protection regulations like GDPR, HIPAA and CCPA are being introduced more frequently than ever, did you know that there is new…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today