Phishing

A phishing attack usually follows a predictable pattern. The attacker crafts a message that mimics a familiar brand or internal sender, often a bank, a payroll system, a government agency, or an IT helpdesk. The message creates pressure through urgency, fear, or curiosity, for example a warning that an account will be suspended, an unexpected invoice, or a delivery that needs confirmation. It then directs the target to a malicious link, a credential-harvesting page, or an attachment. Once the victim enters their details or runs the file, the attacker captures the credentials or gains a foothold in the network.

Phishing comes in several variants distinguished by channel and targeting. Spear-phishing is aimed at a specific person using personalized details, while whaling targets senior executives. Vishing uses phone calls, smishing uses SMS, and quishing uses QR codes. Clone-phishing replays a legitimate message with a swapped malicious link. Business email compromise impersonates an executive or supplier to authorize fraudulent payments. Despite the different channels, the underlying technique is the same: abuse trust to provoke an unsafe action.

Phishing matters because it is the dominant route into most organizations. A single employee who clicks a link and enters a password can expose an entire network, and in regulated sectors such as banking and government, the consequences include financial loss, regulatory penalties, and reputational damage. Because attackers continually refine their lures, technical filters alone are never enough. Lasting defense depends on layered email security, multi-factor authentication, and a workforce trained to recognize and report suspicious messages.