Cybersecurity firm Check Point Software Technologies has released its latest Brand Phishing Ranking for Q2 2024, highlighting the brands most frequently imitated by cybercriminals.

According to the data from Check Point, Microsoft is by far the most imitated brand with regards to phishing attacks, accounting for more than half of all attempts (57%). Apple is now in second place with 10%, moving up from fourth position in the first quarter of 2024, while LinkedIn remains in third place with 7% of attempts.

A number of other brands have moved into the top ten for the first time, including Adidas and WhatsApp, with Instagram moving back into the top ten for the first time since 2022. 

The research follows news of IT leaders reporting an increase in cyber-attacks over the last year, with phishing attacks topping the list of concerns. This new report confirms that 

the technology sector remains the most impersonated industry when it comes to brand phishing, with people more likely to respond to messages that appear to be from critical service providers such as Microsoft, Google or Amazon.

Attackers are now using more sophisticated tactics to target users to a greater effect, such as the use of QR phishing which research shows has rapidly increased to cover 10.8% of all phishing attacks in 2024. According to government data, 84% of businesses suffered from phishing breaches within the last year. 

It doesn’t end at phishing in brand impersonation, however. Check Point Research’s recent H1 Cyber-trends report suggests that cyber-attacks, generally, have risen at an alarming rate over Q2 of 2024, showing a 30% YoY increase globally. Coincidentally, data from the Office for National Statistics revealed an uptick in computer misuse over the same period, with a 37% increase in reported incidents.

Omer Dembinsky, data group manager at Check Point Software, said: “Phishing attacks remain one of the most pervasive cyber-threats and are often the entry point for much larger-scale campaigns. To protect against phishing attacks, users should always verify the sender’s email address, avoid clicking on unsolicited links, and enable multi-factor authentication (MFA) on their accounts.”