Throughout 2008, phishing attacks were present in 0.5 percent of all spam, but during the first half of 2009 they dropped to 0.1 percent, according to IBM's mid-year security report.