Phishing

Phishing is one of the most common forms of social engineering. Attackers send fraudulent emails, messages, or websites designed to appear legitimate in order to steal sensitive information.

Phishing messages often:

• Pretend to be trusted companies
• Contain fake login pages
• Ask users to verify information
• Include malicious links or attachments

Spear Phishing

Spear phishing is a more targeted form of phishing. Instead of sending large numbers of generic emails, attackers research a specific individual or organisation to make the attack appear more convincing.

Because these attacks are personalised, they are often more difficult to identify.

Smishing

Smishing refers to phishing attacks delivered through SMS text messages.

Example:

“Your parcel delivery has failed. Click here to rearrange delivery.”

Vishing

Vishing refers to voice phishing attacks conducted over phone calls.

Attackers may pretend to be:

• Banks
• Technical support
• Government agencies
• Employers

The goal is usually to pressure victims into revealing sensitive information.