Endnotes 1. Netherlands National Coordinator for Counterterrorism and Security. (2022, October). Netherlands National Cybersecurity Strategy. https://english.ncsc.nl/binaries/ncsc-en/documenten/publications/2022/december/06/the-netherlands- cybersecurity-strategy-2022-2028/TheNetherlandsCybersecurityStrategy2022-2028.pdf 2. The White House, Washington, DC. (2023, March). US National Cybersecurity Strategy. https://bidenwhitehouse. archives.gov/wp-content/uploads/2023/03/National-Cybersecurity-Strategy-2023.pdf 3. UK Government Cabinet Office. (2021, December). National Cyber Strategy 2022. https://www.gov.uk/government/ publications/national-cyber-strategy-2022 4. Global Anti-Scam Alliance (GASA). (2024). 2024 Global state of scams report. https://www.feedzai.com/pressrelease/ report-more-than-us1-trillion-lost-to-scams-in-one-year/ 5. United Nations Development Programme (UNDP). (2025, May 21). Anti-scam handbook v2.0. https://www.undp.org/ policy-centre/singapore/publications/anti-scam-handbook 6. World Economic Forum. (2025, January). Global cybersecurity outlook 2025. https://www.weforum.org/publications/ global-cybersecurity-outlook-2025/ 7. European Union Agency for Cybersecurity (ENISA). (2025). Threat landscape 2025. https://enisa.europa.eu/publications/ enisa-threat-landscape-2025 8. SlashNext. (2024, December 18). SlashNext’s 2024 phishing intelligence report shows credential phishing attacks increased by 703% in the second half of the year. https://www.prnewswire.com/news-releases/slashnexts-2024- phishing-intelligence-report-shows-credential-phishing-attacks-increased-by-703-in-the-second-half-of-the- year-302334475.html 9. Heiding, F., Lermen, S., Kao, A., et al. (2024). Evaluating large language models’ capability to launch fully automated spear phishing campaigns: Validated on human subjects. arXiv. https://arxiv.org/abs/2412.00586 10. Anti-Phishing Working Group (APWG). (2025). Phishing activity trends report 2nd quarter 2025. https://docs.apwg.org/ reports/apwg_trends_report_q2_2025.pdf 11. News Service Bund. Le portail du Gouvernement suisse. (2025, July 29). Cybercriminalité: Enquêtes internationales du MPC et de fedpol aboutissent à une condamnation pour Realtime-Phishing en Angleterre [in French]. https://www.news. admin.ch/fr/newnsb/b4yhFXHLpERSkhgNMVb89 12. International Criminal Police Organization (INTERPOL). (2023, August 8). Notorious phishing platform shut down, arrests in international police operation. https://www.interpol.int/en/News-and-Events/News/2023/Notorious-phishing-platform- shut-down-arrests-in-international-police-operation 13. United States Department of Justice. (2024, April 18). Justice Department seizes four web domains used to create over 40,000 spoofed websites and store the personal information of more than a million victims. https://www.justice.gov/ usao-wdpa/pr/justice-department-seizes-four-web-domains-used-create-over-40000-spoofed-websites-and 14. European Union Agency for Law Enforcement Cooperation (Europol). (2024, April 18). International investigation disrupts phishing-as-a-service platform LabHost. https://www.europol.europa.eu/media-press/newsroom/news/international- investigation-disrupts-phishing-service-platform-labhost 15. INTERPOL. (2024, June 27). USD 257 million seized in global police crackdown against online scams. https://www. interpol.int/en/News-and-Events/News/2024/USD-257-million-seized-in-global-police-crackdown-against-online-scams 16. Interisle. (2024, November 18). Cybercrime supply chain 2024. https://www.m3aawg.org/system/files/ cybercrimesupplychain2024.pdf 17. NetBeacon Institute. (2025, August 13). Recent spike in malicious phishing concentrated in two registrars. https://netbeacon.org/recent-spike-in-malicious-phishing-concentrated-in-two-registrars/ 18. Nosyk, Y., Korczynski, M., Maroofi, S., et al. (2024, November 8). INFERMAL: Inferential analysis of maliciously registered domains. https://www.icann.org/en/system/files/files/inferential-analysis-maliciously-registered-domains-08nov24-en.pdf 19. Internet Corporation for Assigned Names and Numbers (ICANN). (2025, June 10). Insights and clarifications on the INFERMAL study. https://www.icann.org/en/system/files/files/insights-clarifications-infermal-study-10jun25-en.pdf 20. Interisle. (2024, July 23). Phishing landscape 2024: An annual study of the scope and distribution of phishing . https://interisle.net/insights/phishing-landscape-2024-an-annual-study-of-the-scope-and-distribution-of-phishing/ 21. Deacon, A. (2023, August 14). Use of subdomain providers gains popularity as a mechanism to launch phishing attacks . https://oxil.uk/blog/use-of-subdomain-providers-gains-popularity-as-a-mechanism-to-launch-phishing-attacks 22. Ibid. 23. Interisle. (2025, September 7). Phishing landscape 2025: A study of the scope and distribution of phishing . https://interisle.net/insights/phishing-landscape-2025-an-annual-study-of-the-scope-and-distribution-of-phishing Fighting Cyber-Enabled Fraud: A Systemic Defence Approach 28

Fighting Cyber-Enabled Fraud 2025