Google unmasks 170,000 daily phishing mails hiding inside 300 billion inbox blasts
Every dawn, 170,000 poisoned letters slip through Google’s perimeter—camouflaged inside a 300-billion-message avalanche, each crafted to make you the next click. Royal Hansen, the company’s security vice president, spooned the exact scale of the scam to Business Insider España: one in every 1,765 emails is a trap, and Europe is the bull’s-eye.
Why your voicemail is the new trojan horse
Text-only lures are old hat. Mandiant’s M-Trends 2026 report—built from half a million hours of breach forensics—shows voice-based social engineering surging to become the planet’s second-most-common initial infection vector. Attackers now cold-call, clone accents, and sweet-talk employees into planting malware in under 30 seconds. Once inside, they instantly hand the keyboard to a ransomware partner; the baton pass happens before most SOC dashboards finish refreshing.
Google’s own telemetry confirms the pivot: low-priority alerts—an odd login here, a spoofed voicemail there—snowball into full corporate lockdowns because criminals chain micro-compromises at machine speed. The old “dwell time” metric is collapsing; some intrusions escalate in under half a minute.
Tech sector ousts finance as top target
For two straight years banks wore the biggest target tattoo. No longer. In 2025, high-tech companies absorbed more hostile traffic than any vertical, according to Google Cloud Security. The lure? Intellectual property, source code repositories, and cloud admin consoles that open wallets wider than any vault.
Europe’s defenders, meanwhile, are spotting more fires themselves. Sixty percent of 2025 incidents were caught internally, reversing 2024’s 60 % external-tip dependency. The flip hints at better detection pipelines—but also at a volume so loud it can no longer be ignored.
The takeaway: phishing is no longer a numbers game; it’s a speed contest. 170,000 daily stabs sound enormous, yet only the first click matters—and criminals are dialling in person to make sure it happens.