---
title: New Report Shows Phishing Links and Malicious Attachments Are The Top Entry Points of Cyber Attacks
description: New detailed attack TTP data covering 2023 sheds much needed light on the threat actor and user actions that are putting organizations at the most risk...
---

[KnowBe4 Blog ](https://blog.knowbe4.com)

# [New Report Shows Phishing Links and Malicious Attachments Are The Top Entry Points of Cyber Attacks](https://blog.knowbe4.com/phishing-and-users-top-list-as-cyberattack-initial-access-enablers)

 Written by [Stu Sjouwerman](https://blog.knowbe4.com/author/stu-sjouwerman) | Apr 3, 2024 4:36:17 PM

New TTP attack data covering 2023 sheds much needed light on the threat actor and user actions that are putting organizations at the most risk.

In cybersecurity vendor ReliaQuest’s [Annual Cyber-Threat Report: 2024](https://www.reliaquest.com/resources/research-reports/annual-threat-report-2024/), there is a ton of great detail mapped to the MITRE ATT&CK Framework outlining which threat actions are used and how organizations are most effectively fighting back and stopping attacks.

According to the report:

- [Phishing](https://www.knowbe4.com/phishing) links or attachments were involved in 71% of all initial access phases of cyber attacks
- The top three MITRE ATT&CK techniques in attacks involved phishing or [spear phishing](https://www.knowbe4.com/spear-phishing/)
- Drive-by-compromise was used in 29% of attack
- QR code phishing saw a 51% increase in just one month – September – over the previous 8 months combined

It appears that there’s a ton of effort around attacks that involve targeting the user. So, just how well are your users responding?

According to ReliaQuest, sadly, in 29% of incidents, users helped to facilitate initial access. In other words, users aren’t exactly helping.

ReliaQuest has some recommendations to better secure users:

- Require employees verify transaction requests through an alternate means of communication
- Block newly-registered domains
- Monitor high-risk roles
- And educate employees through continual [security awareness training](https://www.knowbe4.com/en/products/enterprise-security-awareness-training/)

KnowBe4 empowers your workforce to make smarter security decisions every day. Over 65,000 organizations worldwide trust the KnowBe4 platform to strengthen their [security culture](https://www.knowbe4.com/security-culture) and reduce human risk.

[View full post](https://blog.knowbe4.com/phishing-and-users-top-list-as-cyberattack-initial-access-enablers)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Stu Sjouwerman"
  },
  "dateModified" : "2024-04-06T14:23:09.993Z",
  "datePublished" : "2024-04-03T16:36:17Z",
  "headline" : "New Report Shows Phishing Links and Malicious Attachments Are The Top Entry Points of Cyber Attacks",
  "image" : {
    "@type" : "ImageObject",
    "height" : 667,
    "url" : "https://www.knowbe4.com/hubfs/Phishing%20Student.jpg",
    "width" : 999
  },
  "mainEntityOfPage" : "https://blog.knowbe4.com/phishing-and-users-top-list-as-cyberattack-initial-access-enablers",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "KnowBe4 Blog"
  }
}
```