Get a demo
PlatformPartnersCompanyBlog
Attack Techniques

Phishing

Phishing

Phishing is a type of social engineering attack where threat actors use deceptive communications — typically email, but also SMS (smishing), voice calls (vishing), or messaging platforms — to trick victims into revealing credentials, clicking malicious links, or downloading malware.

Types of Phishing

  • Email Phishing: Mass emails impersonating trusted brands or services
  • Spear Phishing: Targeted attacks customized for specific individuals or organizations
  • Whaling: Attacks targeting senior executives and high-value individuals
  • Business Email Compromise (BEC): Impersonating executives to authorize fraudulent transactions
  • Smishing/Vishing: Phishing via SMS text messages or voice phone calls
  • Clone Phishing: Replicating legitimate emails with malicious substitutions

Common Phishing Indicators

  • Urgent language creating a sense of immediate action required
  • Mismatched or suspicious sender domains
  • Unexpected attachments or links
  • Requests for credentials or sensitive information
  • Generic greetings instead of personalized content
  • Grammar and spelling inconsistencies

Prevention & Detection

Technical Controls

  • Email authentication (SPF, DKIM, DMARC)
  • Advanced email security gateways
  • URL filtering and sandboxing
  • Multi-factor authentication (MFA)

Human Controls

  • Security awareness training and phishing simulations
  • Reporting mechanisms for suspicious emails
  • Verification procedures for sensitive requests (wire transfers, credential changes)

Why It Matters

Phishing remains the #1 initial access vector in breaches. It targets the human element — often the weakest link in the security chain. Effective defense requires both technical controls and user awareness.

Related Terms

Related Reading

Blog

A Malicious Note: Hackers using Microsoft OneNote Attachments to spread malware

Attackers are constantly looking for novel approaches to infect users with malware. Recently, hackers have been using OneNote attachments in phishing emails to spread malware and password stealers to their victims.

Glossary

Lateral Movement

Lateral movement refers to the techniques adversaries use to progressively move through a network after gaining initial access, escalating privileges and expanding their reach to high-value systems.

Glossary

Privilege Escalation

Privilege escalation is the act of exploiting a bug, design flaw, or configuration oversight to gain elevated access to resources that are normally protected from an application or user.

Blog

Exploit Party: Bring Your Own Vulnerable Driver Attacks

BYOVD or Bring Your Own Vulnerable Driver is an attack where a threat actor brings a legitimately signed and vulnerable driver to perform malicious actions on the system. In a BYOVD attack, the attacker can use the vulnerabilities in the driver to execute malicious actions with kernel-level privileges!

← Back to Glossary