Report by Menlo Security
State of Browser Security Report
Key Findings
Four of the top five hosting providers used by bad actors to host phishing attacks were based in the U.S. in 2024.
One in five attacks in 2024 displayed some form of evasive technique designed to evade traditional network and endpoint-based security controls
Nearly 51% of browser-based phishing attempts involved some form of brand impersonation in 2024.
75% of phishing links are hosted on good, trusted websites.
Cybercriminals created nearly 1 million new phishing sites each month in 2024. This represents a 700% increase since 2020.
There is up to six days as the average window of exposure before legacy security tools begin blocking pages from zero-hour phishing attacks.
Menlo Security identified nearly 600 incidents of GenAI fraud in 2024.
There has been a 130% increase in zero-hour phishing attacks in 2024.
AWS and CloudFlare accounted for nearly 50% of all instances of abused cloud hosting instances in 2024.
Phishing attacks hosted on subdomain providers increased by 51% in 2024, representing 24% of all phishing attacks.
There has been a 140% increase in browser-based phishing attacks in 2024 compared to 2023.