Securing Against Phishing Beyond Email
Tripwire, Thursday, July 10th, 2025
Phishing is no longer just an email problem. Reports state that 40% of phishing campaigns now span channels beyond email, hitting collaboration tools like Slack and Teams, plus SMS, and social media platforms.
Voice phishing ('vishing') in particular is on the rise: 30% of surveyed organizations reported at least one instance of attackers using spoofed or AI-cloned calls to steal credentials in the past year. QR-code phishing ('quishing') has also surged, growing 25% year-over-year as threat actors embed malicious codes in posters, invoices, and product packaging to redirect victims to fake login pages or malware downloads.
One of the many factors enabling this increase is the lowered barrier to entry. The amount of off-the-shelf phishing kits on the dark web has increased dramatically, empowering cybercriminals of any skill level to launch high-quality, multi-vector campaigns.