Skip to content
← Back to newsCloudflare Alert: Over 5% of Global Emails Are Malicious, Threat Landscape Intensifies
Markets

Cloudflare Alert: Over 5% of Global Emails Are Malicious, Threat Landscape Intensifies

By Mini maNewcomer0 rep· 12/16/2025

Internet infrastructure giant Cloudflare has issued a stark warning: more than 5% of all emails sent worldwide contain malicious content. This alarming statistic, representing over one in twenty emails, highlights a significant and growing threat to individuals and organizations alike. The situation escalated in November, when the proportion of malicious emails nearly doubled the yearly average, reaching almost one in ten.

 

Key Takeaways

  • Over 5.6% of global email traffic analyzed by Cloudflare over the past year was found to be malicious.

  • In November, this figure surged to nearly 10%, almost double the annual average.

  • Malicious emails encompass those designed for credential theft, data breaches, or financial loss.

  • The findings are particularly concerning for cryptocurrency investors due to the rise in sophisticated phishing attacks.

 

Deceptive Links and Identity Theft Fueling Attacks

Cloudflare's analysis reveals that deceptive links are the most prevalent threat within malicious emails, accounting for 52% of all malicious content. This is closely followed by identity deception at 38%, an increase from the previous year. Attackers are increasingly impersonating trusted individuals or organizations through sophisticated tactics like spoofed domains, similar-looking domains, and display name manipulation.

 

Abused Domain Extensions and Attachment Threats

The .christmas top-level domain (TLD) extension has emerged as the most abused, with a staggering 92.7% of emails originating from it being malicious. Other TLDs frequently exploited by cybercriminals include .lol, .forum, .help, .best, and .click.

Further research from cybersecurity firm Barracuda corroborates Cloudflare's findings. Their analysis of 670 million emails indicated that email remains a primary vector for cyber threats. Notably, a quarter of all HTML attachments were found to be malicious, and 12% of malicious PDF attachments were specifically designed as Bitcoin scams. This underscores the persistent danger posed by malicious attachments and links in distributing malware and launching phishing campaigns.

 

Sources

Discussion (0)

Sign in to join the discussion.

No comments yet. Be the first.

Cloudflare Alert: Over 5% of Global Emails Are Malicious, Threat Landscape Intensifies | BlockzHub