Practical Security

Types of Phishing Attacks

Phishers don’t need to trick everyone they email in order to be successful. They generally cast a wide net and count on someone to have an off day and go along with the attack. Duo’s The Trouble With Phishing states that 17% of people who receive phishing emails enter their credentials into phishing sites.^[112] Put another way, on average, a phisher with just six email addresses can expect to trick one of the account owners into revealing their login credentials.

It’s just an email. What’s the worst that could happen? Let’s take a look at the most common types of phishing attacks.

Phished Credentials

By far, the most common phishing attack is to steal login credentials. Generally this is done by setting up a malicious ...