New Delhi: A growing number of phishing attacks in the first quarter of 2025 focused on impersonating major technology brands, with Microsoft, Google and Apple emerging as the most frequently spoofed names, according to the latest Brand Phishing Report by Check Point Research (CPR).
The study analysed global phishing data and found that Microsoft was imitated in 36 per cent of observed phishing attempts, retaining its top spot from previous quarters. Google moved up to second place with 12 per cent, while Apple accounted for 8 per cent of the phishing activity.
Mastercard Returns to Top 10 as Financial Sector Faces Renewed Threats
One notable trend in Q1 was the re-entry of Mastercard into the top 10, securing fifth position. This marked its first appearance since Q3 2023, signalling a renewed focus by attackers on financial services platforms. The rise of Mastercard in phishing campaigns underlines the financial sector’s continued vulnerability due to the high value of user data.
Technology Sector Most Impersonated
The report identifies the technology sector as the most impersonated industry, followed by social networks and retail. Platforms like Facebook, WhatsApp, LinkedIn and Amazon also featured in the top 10, reflecting broader consumer dependence on digital services and e-commerce.
Omer Dembinsky, Data Research Manager at Check Point Software, noted that phishing attempts continue to exploit user trust in widely used platforms. “Impersonation of trusted digital brands remains a consistent strategy for attackers aiming to compromise personal and financial data,” he said.
Top 10 Most Imitated Brands in Q1 2025:
Microsoft – 36 per cent
Google – 12 per cent
Apple – 8 per cent
Amazon – 4 per cent
Mastercard – 3 per cent
Alibaba – 2 per cent
WhatsApp – 2 per cent
Facebook – 2 per cent
LinkedIn – 2 per cent
Adobe – 1 per cent
About the Report
Check Point Research, the threat intelligence arm of Check Point Software Technologies, compiles the Brand Phishing Report each quarter using data from global cyberattack activity on its ThreatCloud platform.
The findings offer insights into changing attacker behaviour and evolving cybersecurity risks for individuals and organisations alike.
