VIPRE Security Group

In Q4 2025, callback phishing increased from 3% to 18% of all phishing incidents, a 500% spike.

In Q4 2025, Business Email Compromise accounted for 51% of all email fraud cases.

Diversion tactics (fraudulent invoices, fake payroll requests) accounted for 18% of BEC incidents in Q4 2025.

In Q4 2025, CEOs and senior executives accounted for 50% of impersonation-based BEC emails and 41% of total BEC incidents.

Impersonation made up 82% of all BEC incidents in Q4 2025.

Link usage accounted for 75% of phishing attempts in Q1 2024.

Link usage dropped by 42% in Q1 2025 compared to Q1 2024.

Callback scams now account for nearly one in five attempts.

92% of the emails processed by VIPRE were spam.

Callback phishing accounted for 16% of phishing attempts in Q1 2025.

SVG files are used in 34% of phishing attacks as favoured attachments.

PDF attachments are used in 36% of phishing attacks as favoured attachments