Social Engineering Attacks and Mitigations Part V: Phishing

### Executive Summary: This brief awareness article describes phishing and spear-phishing as social engineering attacks that trick recipients into revealing credentials, clicking malicious links, or downloading malware; it explains attackers' use of personalization to increase success and recommends employee training and verifying suspicious requests via alternate channels to reduce organizational risk.