According to the international organization Anti-Phishing Working Group (APWG), cybercrime, specifically phishing, most frequently targets the financial services industry.
Phishing perpetrators typically act by pretending to be a legitimate company or authority, then sending emails containing links to specific websites to victims.
This is done to deceive victims into entering their important information on phishing sites, such as usernames, passwords, PIN numbers, and so on. Once the data is obtained, the perpetrators can freely drain the victim's account or commit other crimes.
Phishing can also be carried out using social engineering tactics, where the perpetrator contacts the victim via phone, text message, or other media, directing the victim to open a specific website for the purpose of similar data theft.
There is also phishing that aims to implant malware or viruses onto the victim's digital devices, allowing the perpetrator to steal the victim's data automatically.
APWG measures phishing attack trends by the number of unique phishing sites sent via email globally. Its data comes from reports from APWG research partners in various countries, as well as from public complaints reported directly to the APWG website.
As a result, APWG found approximately 1.3 million phishing attacks during the fourth quarter of 2022, with the majority targeting the financial services industry.
"The financial sector, including banks, remains the largest target of attacks, accounting for 27.7 percent of total attacks, an increase from 23.2 percent in the third quarter of 2022," stated APWG in its *Phishing Activity Trends Report 4th Quarter 2022*.
In addition, phishing also frequently targets software providers, social media companies, logistics, payment services, e-commerce, telecommunications, and cryptocurrency industries, as shown in the graph above.