Types of Phishing

Phishing is not limited to email. Attackers use many different communication channels.

Email Phishing

The classic form of phishing uses email.

A message may contain a link to a fake login page or a malicious attachment.

Smishing

Smishing is phishing conducted through SMS or other messaging services.

For example, a message may claim that a package delivery requires immediate action.

Vishing

With vishing, attackers attempt to manipulate victims over the phone.

They may pretend to be bank employees, IT support staff or other trusted contacts.

Social Media Phishing

Social networks can also be used for phishing.

Attackers may use fake profiles, direct messages or manipulated links.

Fake Websites

A particularly common technique is creating fake websites that closely resemble legitimate login pages.

The goal is often to convince users to enter their credentials themselves.