ENISA analysts collected and analysed 4 875 incidents. Phishing (including vishing, malspam, and malvertising) is still accounting for about 60% of observed cases.