Compromised websites are the second most prevalent link delivery method, at 30%.

The use of URL shorteners accounts for 7% of phishing delivery.

PDFs remain the preferred vehicle for delivering malicious attachments in phishing, at 64%.

For phishing delivery, the majority (54%) of cybercriminals leveraged open redirect mechanisms.