Phishing

## Executive Summary: This document is an educational briefing on phishing—explaining its origins, how attacks are carried out (reconnaissance, social engineering, credential harvesting), common variants (email phishing, spear phishing, whaling, BEC, smishing, vishing), warning signs, sector-specific impacts, and recommended defenses including layered email security, phishing-resistant MFA, and continuous security awareness and simulation programs.