The Number of Malicious Emails Reaching Inboxes Is Declining

Stu Sjouwerman | Oct 16, 2024

blog.knowbe4.comhubfsPhishing Emails Are After CredentialsNew research shows that less malicious emails are getting past security scanners to the inbox, but also provides details about how phishing emails are becoming increasingly dangerous.

So much of our training is centered around elevating the employee’s state of cyber awareness so that when they do come across that sketchy email or that too good to be true web page, they know better.

But it’s only one part of a larger cybersecurity effort within an organization. The hope is that security solutions will improve and employees become a less critical component of an organization's cyber defense.

The latest data from HP Wolf Security in their Threat Insights Report for September 2024 shows that less malicious emails are getting to the inbox: only 12% of emails (that’s 1 in about 8.5 emails) that are making it to the inbox. That’s the good news.

The report also goes into providing detail on how phishing attacks are leveraging archives (think ZIP files, etc.) and SVG files to hide malware, infostealers, and more. In other words, 1 in 8.5 emails should still worry you.

But as long as employees aren’t engaging with suspicious emails in the first place – something taught with new-school security awareness training – even the “1” won’t stand a chance, as employees should see the email for what it really is and not engage with the malicious contents.

New-school security awareness training can give your organization an essential layer of defense against phishing attacks. KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.