2018 shed a lot of light on how expensive successful phishing attacks can be, with the FBI reporting in July well over $12B in financial losses due to business email compromise and Anthem reaching a $16M settlement in October due to phishing-driven data breach.
Cybercriminals continue to expand their repertoire by iterating on successful attack techniques such as brand impersonations, executive spoofing, and more recently, a spate of bitcoin-based ransom requests.