Over 1 in 20 emails are malicious, warns internet giant Cloudflare

Internet infrastructure company Cloudflare revealed in its 2025 year-in-review report that 5.6% of global email traffic analyzed over the past year was malicious, equating to more than one in twenty emails. This figure spiked significantly in November to 9.7%, nearly double the annual average. Malicious emails include those designed to steal credentials, data, or money, which is particularly relevant to crypto investors due to surging, complex phishing attacks in that sector. The primary threat category, accounting for 52% of malicious emails, involved deceptive links, while identity deception made up 38%. Cloudflare also noted that the most abused top-level domain (TLD) extension was ".christmas," from which 92.7% of emails were malicious. Other research supports these findings, showing email as the most common attack vector, with one in four HTML attachments being malicious.

(Source：Cointelegraph)