Phishing Activity Trends Report, 3rd Quarter 2025 Fortra observed that 74 percent of BEC attacks in Q3 2025 were launched using a free webmail domain. The remaining 26 percent utilized non-webmail domains. Google's Gmail was by far the most popular BEC scams. Far below that at #2 were Microsoft's webmail properties, which were used for 16 percent.