Guardio’s Brand Phishing Report is here again, highlighting the most impersonated brands in phishing scams for Q2 2024. This quarter, Meta has taken the top spot, followed closely by Microsoft and Steam. The report also highlights the most targeted states and the increase in certain types of scams, giving us a clearer picture of the changing cyber threat landscape.
Phishing scams are popping up everywhere these days, and scammers are getting craftier by pretending to be well-known brands. This quarter, from April to June 2024, Meta was the hottest target, with 8.17% of all scam attempts using their name. Countless fake emails and texts claimed to be from Meta, attempting to steal personal info or hack into systems.
This growing trend shows how crucial it is to stay vigilant and protect your personal information.
Top imitated brands in Q2 2024
1. Meta (8.1%)
2. Microsoft (7.8%)
3. Steam (6.7%)
4. USPS (6.3%)
5. AT&T (3.9%)
6. Roblox (3.2%)
7. Telegram (2.2%)
8. OneDrive (2.2%)
9. DHL (1.9%)
10. Uniswap (1.9%)
What you need to know about the top 4 scams:
1. Meta (8.1%) Meta remains a top target for phishing scams due to its vast user base. Scammers often use fake login pages or notifications to steal credentials and personal information. These scams can lead to unauthorized access to personal data and social engineering attacks.
![Blog_FB msngr scam msgs](https://images.ctfassets.net/tdnn4v0n6ild/BxckVtifYWZHJcB2er9Wc/419c04d5bad5f7ef87652307e6a5b9ab/Blog_FB_msngr_scam_msgs.png)
2. Microsoft (7.8%) Microsoft phishing scams frequently involve fake security alerts and Office 365 login pages. These scams aim to harvest login credentials, giving attackers access to emails, documents, and other sensitive information. The sophisticated nature of these attacks often makes them difficult to detect.
![Fake Microsoft login page](https://images.ctfassets.net/tdnn4v0n6ild/7JR0jWSUqCJwkcChIXr0yj/75c25a351aa3258bbf41a06389531418/Blog_Fake_Microsoft_login_page.png)
3. Steam (6.7%) Steam users are targeted through fake giveaways and phishing links via chat messages. Scammers exploit the platform's popularity among gamers to steal account details and in-game items. These scams can result in significant financial losses and compromised personal data.
![Fake Steam website](https://images.ctfassets.net/tdnn4v0n6ild/2s5I0NQn5ByyRJ2pFDEH7K/9383411b24e33a626f6093983e7af4dc/Blog_Fake_Steam_website.png)
4. USPS (6.3%) USPS phishing scams typically involve fake delivery notifications and tracking links. Victims are tricked into providing personal information or paying bogus fees, which can lead to identity theft and financial fraud.
![SPS scam Txt messageand fake website](https://images.ctfassets.net/tdnn4v0n6ild/4qoWTXycniQ30HGpR4WTDf/df9893308d6033edf2b4a9e87a113ccb/Blog_USPS_scam_Txt_msg_and_fake_website.png)
Rising scams in Q2 2024
Besides the top imitated brands, a few new scams are making waves this quarter. Check out these rising scams:
Toll fees scam texts:
The security reports show a staggering 588.4% increase in toll fee scam texts in the US between Q1 and Q2 this year. Scammers are sending fake SMS messages claiming to be from toll services, tricking victims into paying bogus fees or providing personal information. Read more.
![Unpaid Toll Fee scam Txt message](https://images.ctfassets.net/tdnn4v0n6ild/7xVRmTgZEbsBN5tLQ80FSm/cc6093c1fcedd9f966bb44a1e3215cd6/Blog_Unpaid_Toll_Fee_scam_Txt_Msg.png)
MasquerAds:
Using the tactic of "MasquerAds," scammers exploit Google Ads and its legitimate reputation to lead people to sites mimicking the original, like Calend.ly. These fake ads imitate real ones and direct users to phishing sites designed to steal personal information or install malware when users click to install or download. Read more.
Some sponsored Google search results can lead to dangerous sites. This fake site asks you to download Calendly, but the file actually contains malware. @Calendly #Phishoftheweek pic.twitter.com/dznXMHrPBv
— Guardio (@GuardioSecurity) May 30, 2024
Unclaimed baggage/SHEIN/Temu packages:
Scammers are exploiting the popularity of online shopping with fake notifications about unclaimed baggage or SHEIN packages, luring victims into providing personal information or making bogus payments. Read more
Watch out for fake Facebook pages posing as airports, offering unclaimed baggage for sale. These pages lead to malicious sites, which we're continuously monitoring and blocking. #ScamAlert @ATLairport pic.twitter.com/9IoFj9LYNj
— Guardio (@GuardioSecurity) April 30, 2024
Most targeted states for scams in Q2 2024
These states saw the highest number of scam attempts, with many residents reporting phishing incidents. The increased activity in these areas highlights the importance of staying alert and protecting personal information.
- California
- Texas
- Florida
- New York
- Illinois
![USA security events graph](https://images.ctfassets.net/tdnn4v0n6ild/5ITu4FTZvKLJRXtKTQl3dT/8b964b72e7e428b984d8745f36ecafb7/Blog_USA_security_events_graph.png)
Stay safe online
Phishing scams are becoming more sophisticated, with Q2 2024 showing a significant rise in brand impersonations. The top targets include Meta, Microsoft, and Steam, and being aware of which brands are frequently faked can help you stay vigilant. Always double-check any messages or emails you get from these brands and think twice before clicking on links.