Key findings about the evolution of email-based threats
Based on proprietary email threat data and analysis, this report explores the most recent tactics being used by attackers, including a combination of social engineering, automation and advanced malware.
83%
of malicious Microsoft 365 documents contain QR codes that lead to phishing websites
1 in every 4
HTML attachements are malicious
20%
of companies experience at least one account takeover (ATO) incident each month
12%
of malicious PDF attachments are Bitcoin sextortion scams
What you need to know about the latest email threats
Barracuda researchers analyzed nearly 670 million emails during February 2025 that were malicious or unwanted spam. Their findings show email remains the most common attack vector for cyber threats, with malicious attachments and links being used to distribute malware, launch phishing campaigns and exploit vulnerabilities. One in four email messages was either malicious or unwanted spam.
Malicious attachments are prevalent in various file types
An alarming 87% of binaries detected were malicious, highlighting the need for strict policies against executable files being sent via email, since they can directly install malware. Despite a relatively low total volume, HTML files have a high malicious rate of 23% and are often used for phishing and credential theft.
