Report Shows 1,265 Percent Increase in Phishing Emails Since ChatGPT Launch

  • Oct 30, 2023

SlashNext, provider of SaaS-based Integrated Cloud Messaging Security across email, web, and mobile, today released the SlashNext State of Phishing Report for 2023. In this annual report, SlashNext Threat Labs analyzed billions of threats including link-based, malicious attachments and natural language messages in email, mobile and browser channels during a 12-month period from Q4 2022 to Q3 2023; conducted in-depth research into cybercriminal behavior and activity on the Dark Web particularly as it relates to leveraging Generative AI tools and chatbots; and surveyed more than 300 cybersecurity professionals. Among the findings are a 1,265% increase in malicious phishing emails and a 967% increase in credential phishing in particular.

"We cannot ignore statistics like this," said Patrick Harr, CEO, SlashNext. "While there has been some debate about the true influence of generative AI on cybercriminal activity, we know from our research that threat actors are leveraging tools like ChatGPT to help write sophisticated, targeted Business Email Compromises and other phishing messages, and an increase in the volume of these threats of over 1,000% corresponding with the time frame in which ChatGPT was launched is not a coincidence. Our aim is not to overstate or exaggerate the threats stemming from generative AI, but to help our customers and the cybersecurity community at large understand the true dangers and respond appropriately."

Key findings from the report include:

  • 1,265% increase in malicious phishing messages since Q4 2022
  • On average, 31,000 phishing attacks were sent on a daily basis
  • 967% increase in credential phishing
  • 68% of all phishing emails are text-based Business Email Compromise (BEC)
  • 46% of cybersecurity professionals polled reported receiving a BEC attack
  • 77% of cybersecurity professionals polled reported being targets of phishing attacks, and 28% reported receiving those messages via text message
  • 39% of all mobile-based attacks were SMS phishing (Smishing)

"Among the key themes our research tells us is that mobile-based and multi-stage attacks are growing, primarily because threat actors know that users have fewer protections on mobile compared to email," continued Harr. "Here at SlashNext we've seen a significant uptick in customers looking for mobile and multi-channel protections, and they trust in our approach to fight AI with AI. We have been and will continue to be at the forefront of understanding how threat actors leverage generative AI tools to advance or accelerate their attacks, and we are ready to defend."

Access the full report here.

Featured

  • The Next Generation

    Video security technology has reached an inflection point. With advancements in cloud infrastructure and internet bandwidth, hybrid cloud solutions can now deliver new capabilities and business opportunities for security professionals and their customers. Read Now

  • Help Your Customer Protect Themselves

    In the world of IT, insider threats are on a steep upward trajectory. The cost of these threats - including negligent and malicious employees that may steal authorized users’ credentials, rose from $8.3 million in 2018 to $16.2 million in 2023. Insider threats towards physical infrastructures often bleed into the realm of cybersecurity; for instance, consider an unauthorized user breaching a physical data center and plugging in a laptop to download and steal sensitive digital information. Read Now

  • Enhanced Situation Awareness

    Did someone break into the building? Maybe it is just an employee pulling an all-nighter. Or is it an actual perpetrator? Audio analytics, available in many AI-enabled cameras, can add context to what operators see on the screen, helping them validate assumptions. If a glass-break detection alert is received moments before seeing a person on camera, the added situational awareness makes the event more actionable. Read Now

  • Transformative Advances

    Over the past decade, machine learning has enabled transformative advances in physical security technology. We have seen some amazing progress in using machine learning algorithms to train computers to assess and improve computational processes. Although such tools are helpful for security and operations, machines are still far from being capable of thinking or acting like humans. They do, however, offer unique opportunities for teams to enhance security and productivity. Read Now

Most   Popular

Featured Cybersecurity

New Products

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction. 3

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis. 3