Microsoft Responsible for 40% of Global Phishing Attempts in Q3 2025

Microsoft Responsible for 40% of Global Phishing Attempts in Q3 2025

Check Point Research reports an increase in brand impersonation attacks targeting popular technology and payment services. Microsoft remains the most abused brand, followed by Google and Apple.

The latest Brand Phishing Report from Check Point Research shows that Microsoft remains the most popular brand among cybercriminals. In the third quarter of 2025, the company was involved in 40 percent of all phishing attempts worldwide. Google (9%) and Apple (6%) complete the top three. These three companies together accounted for more than half of all global phishing attacks.

Tech Companies Popular Target

The report shows that attackers continue to focus on widely used digital services globally. Among the top 10 are platforms from other sectors besides technology companies. PayPal (6th place) and DHL (10th place) return to the list after being absent. Their reappearance indicates a broader strategy by attackers to also imitate payment and logistics services.

read also

Many IT Leaders in Benelux Do not Report Phishing Incidents

Check Point documented, among others, a fraudulent DHL website that looked like a legitimate login page. Users were lured into entering personal information, supposedly to track a package. In another case, a fake PayPal page was used to promise rewards in exchange for sensitive data.

Beyond Emails

According to Check Point, phishing is no longer limited to simple emails with language errors. Campaigns are becoming increasingly realistic and use AI to set up personalized attacks. The imitation of trusted brands is combined with psychological tricks such as rewards or time pressure.

The technology sector remains the most targeted industry, followed by social networks and the retail sector. Check Point expects a further increase in phishing attacks during the end-of-year period, especially targeting travel and logistics services. Organizations are advised to focus on preventive security, strong authentication, and continuous user awareness.