- USA
- The expansion of US data centers worsens the application of spam and threats
- Cybercriminals change to simple phishing and humans centered using PDF and SVGS
A new report has affirmed that the United States is now the largest source of spam electronic emails in the world.
Trends report of email threats of the first quarter of Vipre, United States, was responsible for more than half (57%) of all spam sent worldwide during the first quarter of 2025.
Vipre analyzed 1.45 billion emails for its report, focusing on the geolocation of the origin IP address found in email headers, instead of domain extensions such as .com.
A problem that will get worse
While there is no unique cause, the data center infrastructure scale in the US. UU. It makes it difficult to apply spam regulations effectively and results in a greater number of entry points so that spam emails spread.
With even more data centers in the United States, this is a problem that will only worsen in the coming years.
The report indicates that from the spam analyzed, 67% was classified as malicious, linked to phishing or malware.
The call return phishing is increasing rapidly, representing almost one in five phishing attempts. Cybercriminals also seem to opt for simpler and humans focused on the most complex and technical.
It was discovered that SVG accessories were rising in popularity among the attackers, arriving in second place just behind the PDFs, since they can be used to deceive users to visit malicious sites.
The manufacturing sector is the main objective for email attacks, with the second place to share and finance the second place.
Vipre says that the Malware panorama has recently changed, with the Backdoor Xred malware family taking first place ahead of the second most prominent malware (Lumma) for a factor of three. Stealc, Agenttesla and Redline followed.
“There is a clear change in the preference of cybercriminals towards low technology tactics, high impact and focused on human being. This requires a fundamental rethinking of email security, one that addresses the human element as vigilant as the technological one,” said Usman Choudhary, Product and Technology Officer Vpré Group.
“With the cybercriminals who dominate the art of human deception and the creation of phishing attacks that avoid conventional defenses, email security in turn requires an approach that will assemble the actions of cybercriminals and use their patterns to create a unique response already proof of the future,” he added.
