« Give us four minutes, learn why phishing is the top cyberthreat | Main | .TOP promises to reduce abuse. Offer a show of good faith »

Thursday, 05 June 2025

February 1–April 30, 2025 phishing activity available at the Cybercrime Information Center

Phishing activity reports for the period February 1–April 30, 2025, are now available at the Cybercrime Information Center. Top 20 rankings of Top-level Domain, Domain Registrar and Hosting operator (by ASN) as well as aggregate records of all operators with phishing activity are available. 

- Modest declines

- Small hosting networks leap into top 20

- Meta and cryptocurrency brands most targeted

- .TOP, .XIN and Dominet (HK) remain persistent threats

https://interisle.substack.com/p/phishing-trends-february-april-2025

 

 

Posted at 12:41 PM in Anti-Malware and Anti-phishing, Domain names and DNS |

Comments

Feed You can follow this conversation by subscribing to the comment feed for this post.

Verify your Comment

Previewing your Comment

Posted by:  | 

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been saved. Comments are moderated and will not appear until approved by the author. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment

Comments are moderated, and will not appear until the author has approved them.

Your Information

(Name is required. Email address will not be displayed with the comment.)

Find me on Mastodon and Facebook

Spotlight Posts

  • Cybercrime Reported in June 2025
    Today, my colleague Colin Strutt looks at cybercrime activity for the month of June 2025. In these monthly reports, we note anything that strikes us as particularly interesting in overall numbers as well as significant changes in ranking for Top Level Domains (TLDs), Registrars, and Hosting Networks. https://interisle.substack.com/p/cybercrime-reported-in-june-2025 #cybercrime #phishing #malware #dnsabuse #spam
  • February 1–April 30, 2025 phishing activity available at the Cybercrime Information Center
    Phishing activity reports for the period February 1–April 30, 2025, are now available at the Cybercrime Information Center. Top 20 rankings of Top-level Domain, Domain Registrar and Hosting operator (by ASN) as well as aggregate records of all operators with phishing activity are available. - Modest declines - Small hosting networks leap into top 20 - Meta and cryptocurrency brands most targeted - .TOP, .XIN and Dominet (HK) remain persistent threats https://interisle.substack.com/p/phishing-trends-february-april-2025
  • Cybercrime Reported in April 2025
    In today's Interisle Insights, Colin Strutt looks at cybercrime activity collected at the Cybercrime Information Center for the month of April 2025.We point out anything that strikes us as particularly interesting in overall numbers as well as significant changes in ranking for Top Level Domains (TLDs), Registrars, and Hosting Networks. Read Cybercrime Reported in April 2025. Interisle Insights is a reader-supported publication. To receive new posts and support our work, consider becoming a free or paid subscriber. Join now!
  • Malware Trends: January - March 2025
    Malware activity reports for the quarter are now posted at the Cybercrime Information Center. Our key statistics show small quarter-over-quarter increases in malicious IP address malware records (Traffic Injectors and Attackware) and unique IPv4 addresses reported as serving or distributing malware, and but meaningful decreases in both endpoint and IoT malware reported. Read Malware Trends: January - March 2025
  • The World's Phishiest Neighborhoods
    In this Interisle Insights article, we take a closer look at our data to better understand what’s hosted at three autonomous systems which have appeared at or near the top in recent quarters. We’ll also review who’s being targeted by these attacks and what corresponding name and address resources are most frequently exploited. Autonomous systems are blocks of Internet addresses, which you can compare to "neighborhoods" in a city. And like any city, some neighborhoods are safe and some are not. The full article, The World's Phishiest Neighborhoods, is hosted here.

Search

My Photo

Categories