The first few months of 2025 saw a massive spike in phishing-as-a-service (PhaaS) attacks targeting organizations around the world, with more than a million attacks detected by Barracuda systems in January and February.

The country where emails originate and the number of countries they are routed through on the way to their final destination offer important warning signs of phishing attacks.