Leading technology firms, including Microsoft, Google and Spotify, were the most targeted by cyber criminals in the second quarter of 2025. This is according to the Threat Intelligence arm of Check Point Software Technologies Ltd.
CheckPoint disclosed that Microsoft was the most impersonated brand, suffering 25 per cent of all phishing attempts globally between April and June 2025. Google followed with 11 per cent, while Apple held third with nine per cent.
The report, released yesterday, noted that Spotify returned to the top 10 for the first time since Q4 2019, ranking fourth with six per cent of phishing activity. Other frequently impersonated brands included Adobe, LinkedIn, Amazon, Booking.com, WhatsApp, and Facebook.
For emphasis, Phishing is the fraudulent practice of sending emails or other messages purporting to be from reputable companies to induce individuals to reveal personal information, such as passwords and credit card numbers.
Check Point noted that the technology sector remains the most impersonated industry, as attackers exploit user trust in software, cloud, and authentication platforms to steal login credentials and payment data.
Speaking on the findings, Data Research Manager at Check Point Software, Omer Dembinsky, said: “Cybercriminals continue to exploit the trust users place in well-known brands. The resurgence of Spotify and the surge in travel-related scams, especially during the Northern Hemisphere’s holiday season, show how phishing attacks are adapting to user behaviour and seasonal trends.”
One of the most prominent phishing attacks of the quarter centred on Spotify. Attackers built a fake login page that mimicked the real Spotify experience, prompting users to enter their usernames and passwords.
Once entered, users were redirected to a counterfeit payment page designed to steal credit card details. This campaign indicated a wider shift toward targeting entertainment and subscription services, reflecting users’ increased dependence on digital platforms for music, video, and content.
The report further revealed that the travel sector also saw a sharp increase in phishing activity, with over 700 Booking.com-themed phishing domains created in Q2.
According to it, many of these used a “confirmation-id**.com” format**, embedding real user data like names and contact details to heighten credibility and urgency. These personalised scams reflect the growing sophistication of phishing attackers, who now use data-driven tactics to enhance their credibility.
Source: Guardian
