Darktrace Detects 32 Million Phishing Emails in 2025 as Identity Attacks Surge
Summary
Hide ▲
Show ▼
Darktrace detected over 32 million high-confidence phishing emails in 2025, indicating a significant rise in identity-driven cyber threats. The report highlights the increasing sophistication of phishing tactics, including the use of newly created domains, malicious QR codes, and novel social engineering techniques. Identity compromise has overtaken vulnerability exploitation as the primary entry vector, with attackers leveraging stolen credentials and hijacked tokens to gain access. The report also reveals regional and sector-specific trends, with the Americas accounting for 47% of global security events and manufacturing being a major target for ransomware.
Timeline
-
26.02.2026 17:00 1 articles · 3h ago
Darktrace Detects 32 Million Phishing Emails in 2025
Darktrace's report reveals that over 32 million high-confidence phishing emails were detected in 2025, with a significant portion targeting VIPs and utilizing newly created domains and malicious QR codes. The report also highlights the shift towards identity compromise as the dominant entry vector, with attackers leveraging stolen credentials and hijacked tokens to gain access. Regional and sector-specific trends are also detailed, with the Americas accounting for 47% of global security events and manufacturing being a major target for ransomware.
Show sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
Information Snippets
-
Darktrace detected over 32 million high-confidence phishing emails in 2025.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Over 8.2 million phishing emails targeted VIPs, accounting for more than 25% of all observed phishing attempts.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
1.6 million phishing emails originated from newly created domains and 1.2 million incorporated malicious QR codes.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
70% of phishing emails successfully passed DMARC authentication, 41% were classified as spear-phishing, and 38% contained novel social engineering techniques.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Identity compromise has overtaken vulnerability exploitation as the dominant entry vector.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Common Vulnerabilities and Exposures (CVE) increased by approximately 20% year-on-year (YoY), with exploitation often occurring before public disclosure.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Across the Americas, SaaS and Microsoft 365 account takeovers accounted for nearly 70% of incidents.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Manufacturing represented 17% of recorded cases and 29% of ransomware incidents in the Americas.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
About 47% of all global security events tracked by Darktrace in 2025 originated in the Americas alone.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
In Latin America, 44% of cases involved malware spreading after credential theft or phishing.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Education was the most impacted sector in Latin America at 18%, with Brazil, Mexico, and Colombia reporting the highest volumes over the past three years.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Europe recorded 58% of incidents linked to cloud and email compromise, compared with 42% involving network-based attacks.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
Africa experienced a 60% YoY rise in ransomware and saw 76% of compromises classified as network-based.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00
-
In Asia-Pacific and Japan, 84% of organizations said AI-powered threats are already impacting them, yet only 42% reported having formal policies governing safe AI use.
First reported: 26.02.2026 17:001 source, 1 articleShow sources
- Darktrace Flags 32 Million Phishing Emails in 2025 as Identity Attacks Intensify — www.infosecurity-magazine.com — 26.02.2026 17:00