Skip to content

At The Identity Organisation, we're here to help!

    Your privacy is important to us, and we want to communicate with you in a way which has your consent and which is in line with UK Law on data protection. As a result of a change in UK law on 25th May 2018, by providing us with your personal details you consent to us processing your data in line with current GDPR requirements.

    Here is where you can review our Privacy & GDPR Statement

    To remove consent at any time, please e-mail with the word "unsubscribe" as the subject.

    +44 (0) 1628 308038

    Facebook and Microsoft Top the List of Most Impersonated Brands in 2022

    As scammers continue to see massive returns on their phishing attacks, the use of impersonation with well-known brands continues to circle around the dominant players.

    If you were going to pretend to be a business in an email that would be sent out to millions, you quickly realize it’s going to need to be a brand that many people know and use. That way, you have a much higher likelihood that recipients of your phishing email will respond.

    According to security vendor VadeSecure’s Phishers’ Favorites 2022 Year-in-Review report, this is exactly what we’re continuing to see. The top brands impersonated in phishing attacks are Facebook, Google, Microsoft and PayPal. The use of Facebook as the impersonated brand saw over 25,000 phishing pages pretending to be the social media platform. But in total, the three Meta brands accounted for over 42,000 unique phishing pages collectively.

    Despite Facebook dominating the list of impersonated brands, other industries saw dramatic increases in phishing and impersonation. According to the report:

    • Financial services (in total) dominated at 34% of all impersonation attacks
    • Internet/telco saw a 111% increase in phishing pages
    • Cloud saw a 77% increase in phishing pages

    The use of impersonation has proven over time to be an effective means of lowering the recipient’s defenses and getting them to engage with malicious content. In the case of all four top impersonated brands, the initial goal is to compromise credentials – something we’ve seen time and time again.

    To ensure your organization’s user defenses remain high, it’s necessary to enroll them in Security Awareness Training so they are continually kept vigilant, ready to spot a phishing attack before they fall for it.

    Free Phishing Security Test

    Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.

    Here’s how it works:

    • Immediately start your test for up to 100 users (no need to talk to anyone)
    • Select from 20+ languages and customize the phishing test template based on your environment
    • Choose the landing page your users see after they click
    • Show users which red flags they missed, or a 404 page
    • Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
    • See how your organization compares to others in your industry

    PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser:

    Sign Up to the TIO Intel Alerts!

    Back To Top