ISLAMABAD: A Russian cyber security company Wednesday disclosed that 88.5 percent of cyber attacks including phishing and scam campaign sought credentials for various online accounts during 2025.
In this regard, the company has issued a report here on Wednesday.
According to the report, Kaspersky analyzed phishing and scam campaigns found that 88.5% of attacks sought credentials for various online accounts. Another 9.5 percent targeted personal data such as names, addresses, and dates of birth, while 2% focused on bank card details during 2025.
According to data from Kaspersky, millions of phishing links were clicked in the previous year– all of which were detected and blocked by Kaspersky solutions. Not everyone uses protective solutions on their devices however, and phishing remains one of the most prevalent cyber threats, with attackers luring users to fake websites where they unwittingly surrender their login credentials, personal information, or bank card details.
Kaspersky research showed that most phishing pages transmit stolen information via email, Telegram bots, or attacker-controlled panels, before it enters underground resale channels.
Data stolen through phishing is rarely used only once: credentials from multiple campaigns are consolidated into data dumps and sold on dark web markets, in some cases for as little as USD50. Buyers sort and verify the data to check whether accounts remain active and reusable across different services.
According to Kaspersky Digital Footprint Intelligence, average 2025 prices ranged from USD0.90 for global internet portals to USD105 for crypto platforms and $350 for online banking access. Personal documents such as passports or ID cards sold for about USD15 on average, with pricing influenced by account age, balance, linked payment methods, and security settings.
As datasets are enriched and combined, attackers can build detailed digital profiles that may later support targeted attacks on executives, finance staff, IT-administrators or individuals with valuable assets or personal documents.
To reduce the risks associated with phishing, Kaspersky recommended that users should not trust links or attachments received by email or messages.
Copyright Business Recorder, 2026
Comments