--- title: Phishing Tops 2023’s Most Common Cyber Attack Initial Access Method description: Phishing Tops 2023’s Most Common Cyber Attack Initial Access Method image: https://www.coolspirit.co.uk/hubfs/Phish%20Blog.jpg --- ![](https://www.coolspirit.co.uk/hubfs/website/images/curves/hero/pngs/hero-curve-white.png) ## Phishing Tops 2023’s Most Common Cyber Attack Initial Access Method Written on: ** Mar 26, 2024 12:33:44 PM ** Written by: ** Alex Raben ** Topic [COOLSPIRiT, Cyber Security, KnowBe4] Share this post: ##### **New analysis shows that the combination of[ phishing](https://www.knowbe4.com/phishing), email, remote access, and compromised accounts are the focus for most threat actors.** Data across the industrycorroborates new findings in cyber risk advisory and response firm Kroll’s just-released Q4 2023 Cyber Threat Landscape Report. But what’s interesting in this report is how the data tells a story of where organisations are falling short in their preventative efforts. First, let’s jump into the findings of where each of the common initial access methods rank. As shown below, while phishing decreased between 2022 and 2023, it still dominates as the most-used method. ![Phishing Tops Image 1](https://www.coolspirit.co.uk/hs-fs/hubfs/Phishing%20Tops%20Image%201.jpg?width=1328&height=542&name=Phishing%20Tops%20Image%201.jpg) *Source: [Kroll](https://www.kroll.com/-/media/kroll/pdfs/publications/q4-2023-threat-landscape-threat-actors.pdf)* Interesting to note is the massive jump in the use of Valid Accounts whereby initial access brokers compromise accounts and sell them to threat actors who leverage the accounts as a means of gaining access to an organization. Since we all know how most of those valid accounts were obtained, I’m going to point out that phishing is an even bigger problem. If we “zoom out” a bit and look at the most common incident threat types, we see ransomware taking a back seat last year to email compromise – again, likely using credential harvesting to obtain credentials. ![Phishing Tops Image 2](https://www.coolspirit.co.uk/hs-fs/hubfs/Phishing%20Tops%20Image%202.jpg?width=1318&height=512&name=Phishing%20Tops%20Image%202.jpg) *Source: [Kroll](https://www.kroll.com/-/media/kroll/pdfs/publications/q4-2023-threat-landscape-threat-actors.pdf)* The underlying story here is clear – phishing is the problem. Whether we’re talking about phishing with the intent of compromising credentials to be used later, or phishing used to infect systems and gain access, cybercriminals are leveraging phishing more now than ever.  Your layered defense against these attacks must include a vigilant user; one who has undergone continual security awareness training, who knows what to look for and how to spot a suspicious email. [KnowBe4](https://www.coolspirit.co.uk/vendors/knowbe4) empowers your workforce to make smarter security decisions every day. Over 65,000 organisations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk. If you believe your current security awareness training is outdated or simply not fit for purpose, or you haven't got a system in place, then contact your COOLSPIRiT Account Manager [today](https://www.coolspirit.co.uk/contact-us) to receive a quick demo and simple pricing. _ _ _ _ _ _ _ _ _  Blog credit: [Stu ](https://blog.knowbe4.com/author/stu-sjouwerman)Sjouwerman, KnowBe4 ![](https://www.coolspirit.co.uk/hubfs/website/images/curves/top/top-curve-dark-blue.svg) ## Discover our latest insights #### Enhance your knowledge by browsing our extensive library of case studies, brief sheets, data sheets, ebooks and white papers. If you have any immediate queries or requests, why not reach out to our team? [Explore now ](https://www.coolspirit.co.uk/insights) ###### Solutions [![Aqua-angle](https://www.coolspirit.co.uk/hs-fs/hubfs/Aqua-angle.png?width=27&height=6&name=Aqua-angle.png)](https://www.coolspirit.co.uk/partners) [Partners](https://www.coolspirit.co.uk/partners) [Hybrid Infrastructure](https://www.coolspirit.co.uk/solutions/hybrid-infrastructure) [Data Management](https://www.coolspirit.co.uk/solutions/data-management) [Networking](https://www.coolspirit.co.uk/solutions/networking) [Cloud](https://www.coolspirit.co.uk/solutions/cloud) [Cyber Security](https://www.coolspirit.co.uk/solutions/cyber-security) [DevOps](https://www.coolspirit.co.uk/solutions/devops) [GUARDiAN](https://www.coolspirit.co.uk/solutions/guardian) ###### Insights [![Aqua-angle](https://www.coolspirit.co.uk/hs-fs/hubfs/Aqua-angle.png?width=27&height=6&name=Aqua-angle.png)](https://www.coolspirit.co.uk/partners) [Blog](https://www.coolspirit.co.uk/blogs) [Case Studies](https://www.coolspirit.co.uk/case-studies) [Ebooks](https://www.coolspirit.co.uk/ebooks) [Data Sheets](https://www.coolspirit.co.uk/data-sheets) [Brief Sheets](https://www.coolspirit.co.uk/brief-sheets) [White Papers](https://www.coolspirit.co.uk/white-papers) ###### About Us [![Aqua-angle](https://www.coolspirit.co.uk/hs-fs/hubfs/Aqua-angle.png?width=27&height=6&name=Aqua-angle.png)](https://www.coolspirit.co.uk/partners) [Our Process](https://www.coolspirit.co.uk/about-us/our-process) [Accreditations](https://www.coolspirit.co.uk/accreditations) [Sustainability](https://www.coolspirit.co.uk/sustainability) [Social Responsibility](https://www.coolspirit.co.uk/social-responsibility) [International Shipping](https://www.coolspirit.co.uk/about/delivery-shipping) [Financing](https://www.coolspirit.co.uk/about/financing-plans) [G-Cloud 14 Framework](https://www.coolspirit.co.uk/g-cloud-14-framework) [News](https://www.coolspirit.co.uk/news) [Events](https://www.coolspirit.co.uk/events) [Contact](https://www.coolspirit.co.uk/contact-us) ###### Support [![Aqua-angle](https://www.coolspirit.co.uk/hs-fs/hubfs/Aqua-angle.png?width=27&height=6&name=Aqua-angle.png)](https://www.coolspirit.co.uk/partners) [GUARDiAN Support](https://www.coolspirit.co.uk/support/guardian-support) [Infrastructure Support](https://www.coolspirit.co.uk/support/infrastructure-support) ###### Get in Touch [![Aqua-angle](https://www.coolspirit.co.uk/hs-fs/hubfs/Aqua-angle.png?width=27&height=6&name=Aqua-angle.png)](https://www.coolspirit.co.uk/partners) T: 01246 454 222 E: [hello@coolspirit.co.uk](mailto:hello@coolspirit.co.uk) Follow us:  [Receive our newsletter ](https://www.coolspirit.co.uk/contact-us?hsLang=en) ![ISO Certifications Condensed 2025](https://www.coolspirit.co.uk/hs-fs/hubfs/ISO%20Certifications%20Condensed%202025.png?width=588&height=58&name=ISO%20Certifications%20Condensed%202025.png) COOLSPIRiT BSI Cert. Nos: FS 550303, IS 733967, EMS 753310, ITMS 764053 Registered in England No: 3600170 All rights reserved. | Copyright © COOLSPIRiT Ltd 2024 | [Cookie Policy](https://www.coolspirit.co.uk/cookie-policy?hsLang=en) | [Privacy Policy](https://www.coolspirit.co.uk/privacy-policy?hsLang=en) | [Modern Slavery Statement](https://www.coolspirit.co.uk/modern-slavery-statement)