Check Point Research (CPR) has unveiled its latest findings in the Brand Phishing Ranking for the first quarter of 2024. This report highlights the brands most frequently imitated by cyber-criminals in their pursuit of personal information and payment credentials.

During this time, Microsoft maintained its position as the most imitated brand in phishing attacks, accounting for a staggering 38% of all phishing attempts. Google came in at second place, with 11% of attempted brand phishing attacks, followed by LinkedIn. 

Notable in this list was the entrance of Airbnb in the top ten, which Check Point believes could be attributed to increased travel over the Easter season. 

Industry-wise, the tech sector maintained its status as the most impersonated, with social networks and banking trailing behind. Technology brands are particularly lucrative targets for cyber-criminals due to their widespread usage in corporate and remote work environments, presenting an enticing entry point into company assets, according to the report. 

CPR also highlighted a specific phishing campaign observed during the first quarter of 2024, involving a deceptive email purportedly from DHL EXPRESS. The email, sent from the address message-system-express@shipping.com, urged recipients to take immediate action regarding DHL shipments. The phishing link embedded in the email directed recipients to a fraudulent website, presenting itself as a legitimate DHL service and prompting users to make a payment to resume delivery.

Recommended reading

• SendGrid Phishing Campaign Targeting SMBs
• Check Point Research | What’s Currently the Top Mobile Malware?
• LinkedIn Tops Global Rankings for Brand Phishing Attacks

To combat the persistent threat posed by brand impersonation, users are urged to exercise caution when engaging with emails or messages, even from trusted brands. By remaining vigilant and adopting proactive cybersecurity practices, individuals can mitigate the risk of falling victim to cybercriminal tactics.

As cyber-threats continue to evolve, proactive measures and robust cybersecurity solutions are essential in safeguarding against the ever-present risk of phishing attacks.