9. Phishing

Phishing Attacks

Phishing attacks are used to target individuals, entire departments, and companies.
This is a significant threat that security professionals need to be aware of and prepared to defend against.

• Many variations of basic phishing attacks have been developed in recent years.
• These attacks are deployed against individuals and networks through:
  • Emails
  • Phone calls
  • Spam
  • Instant messages
  • Videos
  • File attachments
  • Other delivery mechanisms

Whaling Attacks

• Phishing attacks that try to trick highly placed officials or private individuals with sizable assets into authorizing large fund wire transfers to previously unknown entities are called whaling attacks.