Offensive Security
What is Phishing?
Phishing is a form of social engineering in which attackers send fraudulent messages, often email, that appear to come from a trusted source to trick recipients into revealing credentials, clicking malicious links, or opening harmful attachments. It matters because phishing remains one of the most common initial access methods in real-world breaches.
Example
An employee receives an email that mimics the company single sign-on page and enters credentials, which are captured by the attacker.
Reference: CISA ↗
Related Clear Infosec services
Related terms
Have a question about phishing in your environment? Talk to our team.