Research finds that malicious emails spend an average of 83 hours in employees inboxes before being noticed. Barracuda researchers have found it takes, on average, three and half days (83 hours) from when a malicious email attack arrives in an employees inbox, to the point where it’s discovered by a security team or reported by the end-user and removed The researchers analysed threat patterns and response practices across 3,500 organisations in the companies most recent Threat Spotlight, this month the focus was on analysing what happens after a malicious email manages to bypass an organisation’s security and land in a user’s inbox.