Microsoft Tops Brand Phishing, Spotify Makes a Comeback

Microsoft ranks first in brand phishing attacks, according to Check Point Research. In the second quarter of 2025, 25% of phishing attacks mimicked Microsoft. Google followed in second place with 11%, and Apple in third with 9%.
Spotify reappeared in the top ten after Q4 2019, holding fourth place with 6%. Phishing attacks are adapting to seasonal trends and user behavior, with an increase in travel-related scams.
One phishing campaign targeted Spotify users with a fake login page, while an increase in phishing domains related to Booking.com was observed.
The technology sector remains the most targeted industry, followed by social networks and retail.