Phishing is a type of cybercrime involving data theft that can cause serious harm to victims.
Phishing perpetrators typically act by pretending to be a company or authorized institution, then sending emails containing links to specific websites to victims.
This is done to deceive victims into entering their important information on phishing websites, such as banking application usernames, passwords, PIN numbers, and so on.
Once the data is obtained, the perpetrators can freely steal the victim's account balance or commit other crimes.
Phishing can also be carried out using social engineering methods, where perpetrators contact victims via telephone, short message, or other media, then direct the victims to open specific websites for the purpose of similar data theft.
There is also phishing that aims to implant malware or viruses into the victim's digital devices, so that the perpetrator can steal the victim's data automatically.
According to the international organization Anti-Phishing Working Group (APWG), the trend of this type of online crime continues to increase year by year.
APWG measures the trend of phishing attacks from the number of unique phishing websites sent via email globally.
The data comes from reports from APWG research partners in various countries, as well as from public complaints reported directly to the APWG website.
As a result, APWG found that the number of phishing attacks in 2022 increased significantly compared to previous years.
Throughout 2019, the number of reported attacks was still below 100,000 unique phishing websites per month.
Then in 2020-2021 the number reached around 200,000 websites per month, and jumped again to the range of 300,000-400,000 websites per month until reaching a record high in December 2022, as seen in the graph above.
"2022 was a record year for phishing. APWG found there were more than 4.7 million attacks throughout the year. Since the beginning of 2019, the number of phishing attacks has increased by about 150% per year," said APWG in its Phishing Activity Trends Report 4th Quarter 2022.
"In the fourth quarter of 2022, APWG found that phishing attacks most often targeted the financial sector, including banks, with a proportion of 27.7% of total attacks," it continued.