Fortra’s 2025 Email Threat Intelligence Report is here, and it's packed with critical insights every organization needs to understand the evolving landscape of email threats. After analyzing over one million unblocked email threats from 2024, Fortra's experts have uncovered how threat actors are bypassing common security measures to target unsuspecting employees.
Key findings reveal a sharp rise in social engineering tactics, with phishing sites and response-based schemes making up 99% of all email threats. While malware-laden emails are rare, the threat of business email compromise and credential phishing is growing. And as cybercriminals increasingly exploit simple emails with phone numbers and QR codes, detection becomes even harder.
The report also highlights a troubling 200% increase in the misuse of developer tools and legitimate services like eSignature platforms. This abuse is expected to continue unless more proactive countermeasures are put in place.
New email threats may seem alarming for your organization, but they don’t have to be overwhelming with the right strategies in place. By fostering a culture of cybersecurity awareness among employees and providing regular training on how to spot phishing attempts, malicious attachments, and other email-based risks, you can minimize the chances of a successful attack. However, it will not be enough to train users to spot basic red flags in phishing emails. Generative AI will be used to craft messages without obvious mistakes in subject lines and body content. This means that security awareness training efforts must evolve beyond basic awareness, focusing on helping users recognize risky scenarios and report suspicious activity. Implementing advanced email security solutions also strengthens your defenses. With proactive monitoring and a well-established response plan, your organization can effectively handle email threats without letting them disrupt operations or cause unnecessary panic.
Want to learn more about how these trends will shape future attacks and what you can do to protect your organization? Dive into the full report to get actionable insights and predictions that will help you stay one step ahead of the threat actors.