In short
Phishing is a social engineering attack that uses fraudulent messages, often emails, to trick people into revealing credentials, opening malware or making payments.
Key takeaways
- It exploits human behavior rather than technical weaknesses.
- Defenses include awareness training, email filtering and multi-factor authentication.
- Spear phishing targets specific people; business email compromise often impersonates executives or suppliers.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A phishing attack primarily exploits: