{"id":65030,"date":"2025-05-22T13:40:26","date_gmt":"2025-05-22T20:40:26","guid":{"rendered":"http:\/\/www.enxmag.com\/twii\/?p=65030"},"modified":"2025-05-22T13:40:27","modified_gmt":"2025-05-22T20:40:27","slug":"email-remains-the-top-attack-vector-for-cyberattacks","status":"publish","type":"post","link":"https:\/\/www.enxmag.com\/twii\/the-week-in-imaging-twii\/editors-blog\/2025\/05\/email-remains-the-top-attack-vector-for-cyberattacks\/","title":{"rendered":"Email Remains the Top Attack Vector for Cyberattacks"},"content":{"rendered":"\n
\"\"<\/figure><\/div>\n\n\n\n

Email is still the most common attack vector for cyber threats, according to a new report from Barracuda.<\/p>\n\n\n\n

The researchers found that one in four emails during February 2025 was either malicious or spam. HTML attachments were the most common file type used in phishing emails.<\/p>\n\n\n\n

\u201cOne of the most striking findings from the report is that 23% of HTML attachments are malicious, making them the most weaponized type of text file,\u201d Barracuda says.<\/p>\n\n\n\n

\u201cThis statistic underscores a significant shift in how attackers are operating. Rather than relying solely on malicious links, cybercriminals are embedding harmful content within attachments to evade detection by traditional security measures. In fact, more than three-quarters of all detected malicious files were HTML files.\u201d<\/p>\n\n\n\n

Attackers are also increasingly embedding malicious QR codes within attachments, allowing them to evade security filters.<\/p>\n\n\n\n

\u201c68% of malicious PDFs and 83% of malicious Microsoft 365 documents contain QR codes that lead to phishing or other harmful websites,\u201d the researchers write. \u201cThese file types are widely trusted in business environments, making them effective in social engineering attacks. Once the QR code is scanned, victims are redirected to phishing pages impersonating Microsoft 365 login portals, where attackers steal credentials to compromise business accounts.\u201d<\/p>\n\n\n\n

Additionally, the researchers found that 20% of organizations experience at least one account takeover (ATO) attack each month.<\/p>\n\n\n\n

\u201cATO attacks create long-term security risks by allowing attackers to conduct reconnaissance activities and spread further attacks,\u201d Barracuda says. \u201c27% of ATO incidents involved suspicious rule changes, such as setting up email forwarding to an external address or auto-deleting incoming security alerts. These tactics help attackers maintain persistence and avoid detection. Additionally, 17% of compromised accounts were used to send spam or harmful messages, often leading to further phishing attacks, malware distribution, or BEC scams.\u201d<\/p>\n\n\n\n

The researchers add, \u201cTo mitigate risks associated with ATO, SMBs should prioritize multi-factor authentication (MFA), employee security awareness training, and automated monitoring for suspicious account activity.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

Email is still the most common attack vector for cyber threats, according to a new report from Barracuda. The researchers found that one in four emails during February 2025 was either malicious or spam. HTML attachments were the most common file type used in phishing emails. \u201cOne of the most striking findings from the report is that 23% of HTML attachments are malicious, making them the most weaponized type of text file,\u201d Barracuda says. \u201cThis statistic underscores a significant shift in how attackers are operating. Rather than relying solely on malicious links, cybercriminals are embedding harmful content within attachments to evade detection by traditional security measures. In fact, more than three-quarters of all detected malicious files were HTML files.\u201d Attackers are also increasingly embedding malicious QR codes within attachments, allowing them to evade security filters. \u201c68% of malicious PDFs and 83% of malicious Microsoft 365 documents contain QR codes that lead to phishing or other harmful websites,\u201d the researchers write. \u201cThese file types are widely trusted in business environments, making them effective in social engineering attacks. Once the QR code is scanned, victims are redirected to phishing pages impersonating Microsoft 365 login portals, where attackers steal credentials to compromise business accounts.\u201d Additionally, the researchers found that 20% of organizations experience at least one account takeover (ATO) attack each month. \u201cATO attacks create long-term security risks by allowing attackers to conduct reconnaissance activities and spread further attacks,\u201d Barracuda says. \u201c27% of ATO incidents involved suspicious rule changes, such as setting up email forwarding to an external address or auto-deleting incoming security alerts. These tactics help attackers maintain persistence and avoid detection. Additionally, 17% of compromised accounts were used to send spam or harmful messages, often leading to further phishing attacks, malware distribution, or BEC scams.\u201d The researchers add, \u201cTo mitigate risks associated with ATO, SMBs should prioritize multi-factor authentication (MFA), employee security awareness training, and automated monitoring for suspicious account activity.\u201d<\/p>\n","protected":false},"author":178,"featured_media":65031,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[80,1650,82,1638],"tags":[2832],"_links":{"self":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts\/65030"}],"collection":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/users\/178"}],"replies":[{"embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/comments?post=65030"}],"version-history":[{"count":1,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts\/65030\/revisions"}],"predecessor-version":[{"id":65032,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/posts\/65030\/revisions\/65032"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/media\/65031"}],"wp:attachment":[{"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/media?parent=65030"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/categories?post=65030"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.enxmag.com\/twii\/wp-json\/wp\/v2\/tags?post=65030"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}