What is Phishing? The Original Engine of Cyber Fraud
Phishing is one of the oldest and most persistent forms of cybercrime. It refers to the use of fraudulent emails, websites or messages that imitate trusted entities to steal data, deliver malware, or gain unauthorised access to systems. Although email phishing began in the late 1990s, it remains the root cause of most cyber incidents today. Studies show that nearly all cyber-attack incidents begin with a phishing email. Anatomy of a phishing attack The lure: An email appears to come from a legitimate sender - a bank, employer, or supplier. The trigger: The message contains a link or attachment, often using urgency or authority. The action: The victim clicks or downloads, granting the attacker access or leaking credentials. From phishing to vishing and smishing Phishing’s core principles (trust, urgency, deception) now underpin entire branches of cyber fraud: Smishing (SMS phishing) - fraudulent text messages. Vishing (voice phishing) - fraudulent phone calls. Quishing (QR-code phishin
8 June 2020