Facebook and Microsoft Top the List of Most Impersonated Brands in 2022

As scammers continue to see massive returns on their phishing attacks, the use of impersonation with well-known brands continues to circle around the dominant players.

If you were going to pretend to be a business in an email that would be sent out to millions, you quickly realize it’s going to need to be a brand that many people know and use. That way, you have a much higher likelihood that recipients of your phishing email will respond.

According to security vendor VadeSecure’s Phishers’ Favorites 2022 Year-in-Review report, this is exactly what we’re continuing to see. The top brands impersonated in phishing attacks are Facebook, Google, Microsoft and PayPal. The use of Facebook as the impersonated brand saw over 25,000 phishing pages pretending to be the social media platform. But in total, the three Meta brands accounted for over 42,000 unique phishing pages collectively.

Despite Facebook dominating the list of impersonated brands, other industries saw dramatic increases in phishing and impersonation. According to the report:

• Financial services (in total) dominated at 34% of all impersonation attacks
• Internet/telco saw a 111% increase in phishing pages
• Cloud saw a 77% increase in phishing pages

The use of impersonation has proven over time to be an effective means of lowering the recipient’s defenses and getting them to engage with malicious content. In the case of all four top impersonated brands, the initial goal is to compromise credentials – something we’ve seen time and time again.

To ensure your organization’s user defenses remain high, it’s necessary to enroll them in Security Awareness Training so they are continually kept vigilant, ready to spot a phishing attack before they fall for it.

---

Free Phishing Security Test

Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

Here’s how it works:

• Immediately start your test for up to 100 users (no need to talk to anyone)
• Select from 20+ languages and customize the phishing test template based on your environment
• Choose the landing page your users see after they click
• Show users which red flags they missed, or a 404 page
• Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
• See how your organization compares to others in your industry

PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/phishing-security-test-partner?partnerid=001a000001lWEoJAAW