Cloudflare 2023 Phishing Threats Report

Attack trends in multi-channel phishing, identity deception, malicious new domains, and more

This inaugural Phishing Threats Report explores key attack trends based on approximately 13 billion emails processed by Cloudflare over a one-year period. For example:

• Deceptive links were the #1 phishing tactic, comprising nearly 36% of threats.
• Firms are increasingly vulnerable to multi-channel phishing, which targets users in channels beyond email.
• Identity deception threats are rising — and millions of them “passed” SPF, DKIM, and DMARC checks.
• The majority of the time, attackers posed as just 20 well-known brands, such as Microsoft, Google, Salesforce, and Amazon.

Understanding the latest phishing trends — including how attackers are exploiting users’ trust in known entities — is an important first step to preventing phishing.

Download the report for the details.

White Paper from