Phishing is a crime that involves tricking people into sharing confidential information. It is currently a preferred gateway for cybercriminals to gain access to corporate networks and data. According to data from the Identity Theft Resource Center, in Q2 of 2022, out of 184 data breaches reported in the US, 107 started from a phishing scam, 55 from ransomware, and 22 from malware, i.e. phishing caused 55% of the breaches.
This information coincides with data from cybersecurity firm Palo Alto Networks, which, in its 2002 Incident Response Report, reviewed the top three access vectors for cybercriminals, finding that phishing accounted for 37% of cases, followed by software vulnerabilities (31%) and brute force attacks (9%).