Skip to content
← Intel Brief
Enterprise · Red team

Phishing still wins. Here's the data.

What 50 simulated campaigns taught us about human-layer risk and how to actually move the needle.

Phishing campaign data visualised across email and security signals
AN3 Security · · 6 min read

Fifty campaigns. Twelve industries. One consistent result: the inbox beats the firewall.

What moved the needle

  • Role-specific pretexts (not generic "IT support")
  • Simulated internal tools, not external links
  • Reporting culture — teams that reported without shame cut dwell time by 70%

AN3 Intel Brief · Red team & human-layer defense.