Attacks and malware
What is Phishing?
Getting a person to hand over a credential or run something, by sending them a message that looks legitimate.
Phishing is getting a person to hand over credentials, approve something or run a file by sending them a message that looks legitimate. It arrives by email most often, but also by text message, phone call, chat apps and QR codes.
It remains one of the most common initial access methods because it targets people rather than software. Modern phishing kits can proxy the real login page and capture session cookies, which defeats one-time codes as well as passwords.