Phishing

What is Phishing?

Phishing is a social engineering tactic that uses emails to deceive users into clicking malicious links and attachments, or responding with sensitive information. Often times these emails seem to be coming from a legitimate source, like a fellow employee, a vendor, or a customer. These phishing attacks can be sent in bulk, casting a wide net, or be more targeted to specific organization, department, or individual.

Attackers are after any sensitive information they can get their hands on, whether it's social security numbers, bank account information, login credentials, medical records, and more. This information can be used in further attacks, including identity theft, fraud, and business email compromise (BEC). If they can get a user to click a malicious link or attachment, they can inject ransomware into the environment, lock you out of your own systems, and demand payment to unlock them.