Reported Phishing Attacks, 4Q2024-3Q2025
In the third quarter of 2025, APWG founding member Crane Authentication (formerly OpSec Security) recorded that the SAAS/Webmail category was the sector most attacked by phishing, with 21.2 percent of all phishing attacks. Social Media came in at #2, with 14.6 percent of phishing attacks. Financial Institutions were the most-targeted sector in Q2, but fell to #3 in Q3. In Q3 2025 Crane Authentication detected a decrease in phishing that used URLs as compared to Q2 2025. Instead, vishing/smishing volumes continued to rise. "Our SMS-based fraud detections have increased by nearly 35 percent in the last quarter” said Matthew Harris, Senior Product Manager, Fraud at Crane Crane Authentication offers expertise, decades in development, and cutting-edge innovations that protect and enhance products, secure identities, and safeguard revenues.