Phishing Attacks 101: Types of Phishing Attacks and How to Prevent Them

This document provides an overview of phishing as a social engineering threat, describing key variants (email phishing, spear phishing, whaling), the role of phishing kits in scaling attacks, and practical prevention measures such as employee awareness, multi-factor authentication, social media hygiene, and anti-phishing tooling/APWG reporting. It cites notable historical cases (Facebook/Google invoice fraud, Sony breach via spear phishing, and Crelan Bank CEO fraud) to illustrate impact, but does not contain specific indicators of compromise or technical incident analysis.