Report by Abnormal AI

2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets

8 FINDINGSPublished Apr 22, 2026
View Original Report →

Key Findings

Phishing accounts for 58% of all attacks.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
PhishingEmail Security

Billing account update requests have a 26.5% compromise rate.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
Billing FraudBECFinancial FraudPhishing

Routine invoice inquiries have a compromise rate of less than 1%.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
Invoice FraudBECFinancial FraudPhishing

21.6% of phishing attacks use redirect chains that route victims through multiple URLs to obscure malicious destinations.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
PhishingEvasion TechniquesEmail Security

33% of all business email compromise in higher education is lateral.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
Higher EducationBECInternal Threats

Nearly one in eight phishing attacks that reach student inboxes originate from compromised internal accounts.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
Higher EducationPhishingInternal Threats

In small organizations, VIP impersonation accounts for 43% of internal impersonation attacks.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
Executive ImpersonationInternal ImpersonationInternal ThreatsSmall BusinessVIP Impersonation

Vendor email compromise accounts for 61% of all business email compromise attacks.

Abnormal AI2026 Attack Landscape Report: How Threat Actors Tailor Tactics to Their Targets·3mo ago
BECVendor Email CompromiseEmail Security