A new report from SlashNext analyzes scam trends to help organizations prepare for threats in 2025. The report analyzes a range of email and mobile threats, such as: 

• Business email compromise (BEC) attacks 
• Malicious attachments and links 
• QR codes 
• AI-powered natural language attacks 

According to the report, credential theft attacks increased by 703% in the second half of 2024, suggesting a rise in the use of phishing kits and social engineering techniques. Overall, email-based attacks increased by 202% in H2 of 2024, with individuals receiving at minimum one phishing link each week that was able to bypass conventional network security. 

Other key findings from the report include: 

• Among the observed embedded, malicious links, 80% were zero-day threats that were previously unknown. 
• Users faced an average of three to six threats each week during peak periods. 
• Users experienced an average of 600 mobile threats per year. 
• Social engineering threats saw a 141% increase in H2 of 2024.