MY ONE BLOGby Manishdai
Cybersecurity

What is Phishing?

Quick answer

A social engineering attack that uses fake emails, messages, or websites to trick people into revealing information or installing malware.

Phishing, explained

A phishing message pretends to come from a trusted source, such as a bank, delivery company, employer, or popular online service. It typically creates urgency, for example warning that an account will be suspended, and includes a link to a fake login page or a malicious attachment.

Variations include spear phishing aimed at specific individuals using personal details, whaling targeting executives, smishing via SMS, and vishing via phone calls. Generative AI has made convincing, error-free phishing messages easier to produce. Warning signs include mismatched sender addresses, unexpected requests for credentials or payment, and suspicious links. Defenses include security awareness training, email filtering, multi-factor authentication, passkeys, and verifying requests through a separate channel.

Related terms

Business Email Compromise

A scam in which criminals impersonate or take over a business email account to trick staff into sending money or sensitive data.

Keylogger

Software or hardware that secretly records the keys a user types, often to steal passwords and other sensitive information.

Malware

Malicious software designed to damage, disrupt, spy on, or gain unauthorized access to computers and networks.

Multi-Factor Authentication

A login method that requires two or more different types of proof of identity, such as a password plus a code from your phone.

QR Code

A two-dimensional barcode made of black and white squares that stores information such as a web link or payment details for quick scanning.

Ransomware

Malware that encrypts or steals a victim's files and demands payment, usually in cryptocurrency, to restore access or prevent leaks.

Security Awareness Training

Education that teaches employees to recognize and avoid cyber threats such as phishing, scams, and unsafe handling of data.

Smishing

Phishing carried out through SMS or other text messages, tricking people into clicking malicious links or sharing personal information.

Social Engineering

Manipulating people into breaking security practices, such as sharing passwords or granting access, rather than attacking technology directly.

Spear Phishing

A targeted phishing attack aimed at a specific person or organization, using personal details to make the message more convincing.

Vishing

Voice phishing, a scam in which attackers use phone calls or voice messages to trick people into revealing information or sending money.

Guides that mention Phishing