How Attackers Use It
Attack Summary
Convincing email, SMS (smishing), or voice call (vishing) that tricks a target into providing credentials, installing malware, or approving a fraudulent transaction.
- Threat actor builds believable lures using current events or brand impersonation.
- Victims are directed to spoofed login portals or malicious attachments.
- Credentials or session tokens are captured in real time.
- Compromised accounts are reused for business email compromise or lateral attacks.