Every day, we stop more than 100 million harmful emails from reaching Gmail users. Last year, during the peak of the pandemic crisis we saw 18 million daily malware and phishing emails related to COVID-19. This is in addition to more than 240 million COVID-related daily spam messages. Our ML models evolve to understand and filter new threats, and we continue to block more than 99.9% of spam, phishing, and malware from reaching our users.

We wanted to explore what factors influence being targeted by email phishing and malware and whether higher-risk users are adopting the strongest protections we have to offer. To do this, we teamed up with researchers at Stanford University to study over a billion phishing and malware emails and their anonymized targets. We recently presented our study at the Internet Measurement Conference (IMC), and it’s now available here.

We found that multiple factors correlate with higher risk: where you live, what devices you use, and whether your information appeared in previous third-party data breaches. 

Phishing and malware evolves faster than you think

We aggregated and analyzed all of the phishing and malware campaigns that Gmail automatically blocked over a five-month period to identify patterns. 

• We found that users in the United States were the most popular targets (42% of attacks), followed by the United Kingdom (10% of attacks), and Japan (5% of attacks). 
• Most attackers don’t localize their efforts, using the same English email template for users in multiple countries. 
• There is, however, some evidence of regional attackers: 78% of the attacks targeting users in Japan occurred in Japanese, while 66% of attacks targeting Brazilian users occurred in Portuguese.

We also noticed some patterns among attackers and botnets that distribute phishing and malware emails:

• They rely on fast-churning campaigns. A similar email based on a template is sent to 100–1,000 targets on average. 
• The campaigns are brief and bursty, lasting just one to three days on average.
• In a single week, these small-scale campaigns accounted for over 100 million phishing and malware emails in aggregate, targeting Gmail users around the globe.

While the users that attackers target change from week to week, in aggregate these patterns remain largely stable over time.

Factors that correlate with heightened risk

Beyond how attackers operate phishing and malware campaigns, we also analyzed what factors put a user at higher risk of attack. In order to avoid singling out any individual user or their personal data, we used an anonymization technique called “k-anonymity” to ensure any risk trends that we identified applied to a broad group of similar users. We modeled the likelihood of receiving any phishing or malware emails in a given week as a function of geographic location, demographics, security posture, device access, and prior security incidents (such as having personal data revealed by a third-party data breach).

Here is what our model found:

• Having your email or other personal details exposed in a third-party data breach increased the odds of being targeted by phishing or malware by 5X. 
• Where you live also affects risk. In Australia, users faced 2X the odds of attack compared to the United States, despite the United States being the most popular target by volume (not per capita). 
• With respect to demographics, the odds of experiencing an attack was 1.64X higher for 55- to 64-year-olds, compared to 18- to 24-year-olds.
• Mobile-only users experienced lower odds of attack: 0.80X compared to multi-device users. This may stem from socioeconomic factors related to device ownership and attackers targeting wealthier groups.

These correlations help us understand that risk is not evenly spread across geographic and demographic boundaries. 

How to stay safer

Gmail’s phishing and malware protections are automatically turned on by default. Here’s our top recommendations for what you can do today to stay safer.

For individual users:

• Complete a Security Checkup for personalized and actionable security advice.
• If appropriate, consider enrolling in Google’s Advanced Protection program, which provides Google’s strongest security to users at increased risk of targeted online attacks. 
• Enable Enhanced Safe Browsing Protection in Google Chrome to substantially increase your defenses against dangerous websites and downloads on the web.
• Browse these additional tips to manage your online security and choose the right level of protection for yourself.

For Workspace admins:

• New research reveals who’s targeted by email attacks. Take a look at our advanced phishing and malware protection. These are turned on by default across all Google Workspace licenses, and you can further customize them according to the unique needs of your organization.

Editor’s note: Today’s post is by Roger Lim, IT Manager of Collaboration Infrastructure Development, and Jim Arcure, Director of Infrastructure Development, both with Colgate-Palmolive, the multinational consumer products company. Colgate-Palmolive is in the midst of a multiyear project to create a collaborative, flexible work culture, leveraging Google Workspace and Chrome Enterprise.

Colgate-Palmolive Company is a caring, innovative growth company reimagining a healthier future for all people, their pets, and our planet. Focused on Oral Care, Personal Care, Home Care, and Pet Nutrition, and reaching more than 200 countries and territories, Colgate teams are developing and selling product offerings essential to society through brands such as Colgate, Palmolive, elmex, meridol, Tom’s of Maine, hello, Sorriso, Speed Stick, Softsoap, Irish Spring, Protex, Sanex, Filorga, eltaMD, PCA Skin, Ajax, Axion, Fabuloso, Soupline and Suavitel, as well as Hill’s Science Diet and Hill’s Prescription Diet.  

Colgate-Palmolive has been accelerating growth and delivering meaningful innovation and attracting new and diverse talent in areas such as ecommerce, innovation and digital. That speed and agility comes in large part from the Chrome Enterprise tools that allow the business to move faster and stay competitive.

Changing out software and hardware for 30,000 employees in 70+ countries is a massive project. Early on, we chose Chrome Enterprise as our partner. We had to move away from our dependency on legacy platforms, software, and devices if our business was going to thrive. We knew cloud-based tools like Chrome and Google Workspace would do what on-premises solutions can’t—ease the IT workload while keeping employees happy and productive.

Why we’re escaping legacy apps and embracing the cloud

We don’t want Colgate-Palmolive’s size and geographical breadth to get in the way of people working together and maintaining its strength in global teamwork. That’s why we’re replacing bulky, hard-to-maintain, on-premises applications and software with cloud versions that everyone can securely access in a web browser.

As an IT team, we thought about how much work time we spent installing, updating, and troubleshooting software (up to 30 percent of work hours during big upgrades!). As we were looking at ways to work together better, we had our eyes on the cloud revolution—and, specifically, Chrome Enterprise and Google Workspace.

First step, switch to a new browser

Back in 2016, the IT team was working to move everyone to Google Workspace and away from legacy productivity applications. Once you start Google Workspace adoption, it’s time to take a closer look at browser options.

We chose Chrome Browser for several reasons. It updates automatically, so we could cross lengthy upgrade tasks off our list. An even bigger benefit is that Chrome Browser’s management tools, data protection, and malware detection are all built in. We anticipate a lot of synergy here by leveraging these features and having our users go all Chrome.

Chrome Browser also gave us tools to manage and grant access to apps across our multi-platform device fleet. We call Chrome Browser Cloud Management our “golden nugget” because every browser gets enrolled automatically in browser management.

It’s now much easier to push out new extensions and apps (and allowlist or blocklist them) compared to the time-consuming process of using our existing desktop policy management settings. The ability to easily manage extensions is a huge benefit since it enabled IT to provide new and safe functionality to our end users.

Next, share new ways of working together 

Our IT team wants workers to see the benefits of Google Workspace and Chrome Browser on their own, but sometimes we have to guide them toward the finish line. At the beginning of the project, we developed “Going Google” tools to notify users to consider Google Workspace when opening legacy applications that are no longer needed.

As Chrome Enterprise and Google Workplace became our primary productivity tools, it was also important to ensure our users did not fall back on old habits. Our “Going Google” tools gave our IT organization the ability to not only notify, but turn off specific legacy apps per user. Though IT could easily restore access to these legacy apps on a temporary basis, we have seen a significant dropoff in these types of requests over the past few months. Our goal is to give Colgate people a gentle and consistent reminder that we will be a Google Workspace-only company. By taking these active and decisive steps, we ensure that our users and teams are migrating to Google Workspace today.

To that end, we’ve provided lots of support. We use over 1,000 Colgate “Google Guides” around the world who run on-site classes and webinars on Google Workspace, and are available for one-on-one help, as well as roughly 700 “Google Gurus” who are savvy early-adopters and can lend a hand to colleagues with questions about Google Workspace. Our training classes and webinars are playing to packed houses, and we’re scheduling sessions that focus on specific skills, like a class about using Google Sheets attended by 250 people via Google Meet.

Finally, start rolling out new devices

If we can get everyone at Colgate-Palmolive working in Google Workspace and Chrome Browser, then offering Chromebooks is another natural fit: Chromebooks and the Chrome OS are built for the cloud world we want to work in. We’re pilot testing about 200 Chromebooks for employees, mostly in our customer development department. The Chromebooks are in high demand in challenging locations because they’re easier to deploy for new hires. When employees eventually get back to their offices, we are eager to expand Grab-and-Go racks for people that need a temporary loaner. These Grab-and-Go racks in our New York City and Piscataway, N.J. offices will provide another way for people to test drive Chromebooks. 

Two hundred-odd years after Colgate-Palmolive started doing business, we’re excited about the modern focus of our workplace tools. The Google tools that allow us to collaborate also allow the company to succeed well into our third century.

The holiday season is upon us! If you are making your list and checking it twice, we’ve got a few learning gifts you can tick off the list and share with others too. For the season of giving, we’ve wrapped up some of our most popular training and certification opportunities and made them available at no-cost.

This December we’re aiming to offer something for everyone, whether you’re just getting started with cloud, or knee deep in preparing for a professional certification exam. Start with the fundamentals to gain a deeper understanding of cloud whether you’re in a business or technical role. Perhaps you’re looking to flex your data analytics and ML muscle with BigQuery and SQL, earn a Google Cloud skill badge, or enhance your technical cloud skills. Or jump into a hot topic like sustainability and learn about Google’s commitment to a clean cloud, and how to use sustainability tools. Read on to find something on your learning wishlist.

We also have a variety of learning formats to fit your needs. Complete hands-on labs, view courses and webinars, or jump into competitions like the Google Cloud Fly Cup Challenge or our most popular #GoogleClout Challenge of 2022 – and let the fun begin!

Are you ready to learn? Take a look at the training we’ve recommended below to work towards your goals as we head into the new year, with new skills, to make the most of new opportunities.

We’re giving plenty of learning gifts to choose from this month, so take your pick from the topics below:

ML, AI and data analytics

Who it’s for: ML, AI and data engineers
What you’ll take away: A deeper understanding of working in BigQuery and SQL.
Level: Foundational
Start learning now:

• Introduction to SQL for BigQuery and Cloud SQL – Get started with this one hour and 15 minute hands-on lab to learn fundamental SQL querying keywords, which you will run in the BigQuery console on a public dataset, and how to export subsets of a dataset into CSV files, then upload to Cloud SQL. You’ll also learn how to use Cloud SQL to create and manage databases and tables, with hands-on practice on additional SQL keywords that manipulate and edit data.

• Weather Data with BigQuery – In this 45 minute lab, you’ll use BigQuery to analyze historical weather observations, and run analytics on multiple datasets.
• Insights from Data with BigQuery – Earn a shareable skill badge when you complete this five hour quest. It includes interactive labs covering the basics of BigQuery, from writing SQL queries, creating and managing database tables in Cloud SQL, and querying public tables to loading sample data into BigQuery.
• The Google Cloud Fly Cup Challenge – This is a three-stage competition in the sport of drone racing in the Drone Racing League (DRL). You will use DRL’s race data to predict outcomes and give performance improvement tips to pilots (these are the best drone pilots in the world!). There’s a chance to win exclusive swag, prizes, and an expenses paid trip to the DRL World Championship. Registration closes on December 31, 2022.

CI/CD

Who it’s for: Software Developers
What you’ll take away: Take part in our most popular #GoogleClout challenge of 2022! Build a simple containerized application.
Level: Fundamental
Start learning now:

• GoogleClout – CI/CD in a Google Cloud World – Flex your #GoogleClout in this cloud puzzle that challenges you in a lab format to create a Cloud Build Trigger to rebuild a containerized application hosted on a remote repository. Register it in the Artifact Registry and deploy. You’ll be scored on your results and earn a badge to share.

Preparing for Google Cloud certification

Who it’s for: Cloud engineers and architects, network and security engineers and Google Workspace administrators
What you’ll take away: Explore the breadth and scope of the domains covered in the cloud certification exams, assess your exam readiness and create a study plan.
Level: Foundational to advanced
Start learning now:

• Preparing for Google Cloud certification – These courses are for Associate Cloud Engineers, Professional Cloud Architects, Professional Cloud Network Engineers, Professional Cloud Security Engineers, and Google Workspace Administrators preparing for Google Cloud certification exams. You’ll also earn a completion badge when you finish the course.
• Preparing for the Cloud Architect certification exam – Join this 30 minute on-demand webinar to learn about resources to maximize your study plan, and get tips from a #GoogleCloudCertified Professional Cloud Architect.

Intro to Google Cloud for technical professionals

Who it’s for: Software Developers
What you’ll take away: Boost your Google Cloud operational and efficiency skills to drive innovation by navigating the fundamentals of compute, containers, cloud storage, virtual machines, and data and machine learning services.
Level: Foundational
Start learning now:

• Getting Started with Google Cloud Fundamentals – This on-demand webinar takes a little less than three hours to complete. Navigate Compute Engine, container strategies, and cloud storage options through sessions and demos. You’ll also learn how to create VM instances, and discover Google Cloud’s big data and machine learning options.

Intro to Google Cloud for business professionals

Who it’s for: Business roles in the cloud space like HR, marketing, operations and sales
What you’ll take away: A deeper understanding of cloud computing and how Google Cloud products help achieve organizational goals.
Level: Foundational
Start learning now:

• Cloud Digital Leader learning path -There are four courses in this learning path covering digital transformation, innovating with data, infrastructure and application modernization, and Google Cloud security and operations.

• Preparing for the Cloud Digital Leader certification exam – In this 30 minute webinar continue your learning journey by preparing for the Google Cloud Digital Leader certification exam. The webinar covers all the resources we’ve made available to help you prepare.

Sustainability

Who it’s for: Software Developers
What you’ll take away: Learn how the cleanest cloud in the industry can help you save your cloud bill, and save the planet.
Level: Foundational
Start learning now

• A Tour of Google Cloud Sustainability -Work through this one hour, hands-on lab, to explore your carbon footprint data, use the Cloud Region Picker, and reduce your cloud carbon footprint with Active Assist recommendations.

Keep connected and learning with us in 2023

Accelerate your growth on Google Cloud by joining the Innovators Program. No-cost for users of Google Cloud (including Workspace), it’s for anyone who wants to advance their personal and professional development around digital transformation, drive innovation, and solve difficult business challenges.

Continue your learning with Google Cloud in 2023 by starting an annual subscription¹ with Innovators Plus benefits. Gain access to $500 in Google Cloud credits, live learning events, our entire on-demand training catalog, a certification voucher, access to special events, and other benefits.

Build your skills, reach your goals and advance your career with 12 no-cost ways to learn Google Cloud!

1. Start an annual subscription on Google Cloud Skills Boost with Innovators Plus for $299/year, subject to eligibility limitations.