Phishing emails that appear to be internal and come from the IT or HR department are the emails that trick the most users, according to KnowBe4’s Q1 2025 Phishing Report.
Over 60% of emails that tricked users into clicking mentioned an internal team and almost 50% specifically mentioned HR. The subject lines that got the most clicks were “zoom clips” from managers, reports on HR training, and email server warnings.
Fake login pages that appear to come from Microsoft, LinkedIn, and Google are also things that fool many people.
