In order to deliver a payload, such as malware, nearly 98 percent of all cyberattacks employ some type of social engineering technique. A phishing email is the most common way for social engineering attacks to be launched in the first instance. As a result, nearly 92 percent of the time, threat actors use email to spread malware to victims.