Phishing Risk Across 5 Key US Industries: ANY.RUN Data & Mitigation Strategies
ANY.RUN reports phishing exposure above 70% in US finance and manufacturing, driven by AiTM kits like Sneaky2FA and ClickFix social engineering.
ANY.RUN submission data shows phishing exposure at 73.4% in finance and 72.2% in manufacturing, with email messages the dominant analyzed file type. In banking, ClickFix prevalence hits 71%, followed by EtherHiding (63.8%) and the Sneaky2FA adversary-in-the-middle phishing kit (62.3%). Technology-sector threats include Tycoon, EvilProxy, and EvilTokens, all targeting credentials, authentication sessions, and access tokens. The report argues email filtering, MFA, and awareness training alone leave visibility gaps against modern identity-focused attacks.
- Phishing exposure reaches 73.4% in finance and 72.2% in manufacturing
- ClickFix (71%), EtherHiding (63.8%), Sneaky2FA (62.3%) lead banking threats
- Attacks increasingly target sessions, tokens, and identity rather than malware delivery
- AiTM and QR-code phishing evade email filtering, MFA, and user training
- ATT&CK
- T1566.002 Spearphishing LinkT1557 Adversary-in-the-MiddleT1539 Steal Web Session CookieT1204 User Execution
From the original article
6 min read at any.run
According to fresh ANY. RUN data, phishing exposure remains above 70% in several critical industries. This doesn’t happen because organizations aren’t protected enough.
any.run
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.