SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware

Austin, UK, 4 December 2025: according to SpyCloud, phishing has surged 400% year over year, with the workforce three times more likely to be targeted by phishing than by infostealer malware. The company tracked nearly 28+ million recaptured phished records, with almost 40% containing a business email address, compared with 11.5% in recaptured malware data.

The findings point to phishing now being the preferred gateway into enterprise environments, with threat actors using access as a launchpad for follow-on attacks. SpyCloud's data also notes that phishing is the leading entry point for ransomware, accounting for 35% of all ransomware infections. The report underlines the need for real-time visibility into identity exposures and post‑compromise remediation to mitigate these threats.