14 Types of Phishing Attacks and How to Identify Them

**Executive Summary:** This report is an awareness-focused guide that catalogs 14 types of phishing (e.g., email, HTTPS, spear, whaling/CEO fraud, vishing, smishing, angler, pharming, pop‑up, clone, man‑in‑the‑middle, evil twin, watering‑hole, and search engine phishing), outlines indicators for recognizing each type, discusses detection techniques (like DPI/DFI for MITM), and recommends mitigations such as employee training, email filtering, MFA, patching, browser alerts, access controls, takedown monitoring, and regular backups; it includes a recent example of Twitter verification scams and is intended as defensive guidance rather than an incident report.