This report analyzes the evolution of email threats in 2025, focusing on trends like thread hijacking, QR code scams, and various phishing tactics. It provides insights into how attacks are becoming more customized and recommends strategies for 2026.

Emails originating from IT or HR departments are increasingly being targeted by phishing attacks, leading to a rise in successful breaches. These phishing attempts often leverage the trust associated with internal communications, making it crucial for organizations to educate employees about recognizing and reporting suspicious messages. Strengthening email security measures can help mitigate these risks.