Introducing Cloudflare's 2023 phishing threats report

What this post added

This post contributes to the 'Website Security & Threat Management' thread by providing a detailed analysis of phishing threats observed between May 2022 and May 2023. It outlines Cloudflare's email security data processing, the volume of blocked malicious messages, and key phishing trends identified, including deceptive links, identity deception, and brand impersonation. It also details the technical methods used for email threat categorization, such as structural analysis, sentiment analysis, and trust graphs, and provides specific examples of attack vectors, including a Microsoft credential harvesting attempt that utilized OCR and a multi-stage redirect chain.