Phishing victims experience attempted account breaches and fraudulent transactions an average of about five days after getting phished, according to the researchers.
The findings were based on a year-long analysis of about 23 million user visits to more than 400,000 phishing pages.