In Phishing (pronounced like fishing), the social engineer aĴempts to get the targeted individual to disclose personal information like user names, account numbers, and passwords. This is often done by using authentic looking, but fake, emails from corporations, banks, and customer support staff. Other forms of phishing aĴempt to get users to click on phony hyperlinks that will allow malicious code to be installed on the targets computer without their knowledge. This malware will then be used to remove data from the computer or use the computer to aĴack others. Phishing normally is not targeted at specific users but may be everyone on a mailing list or with a specific email address extension, for example every user with an “
Spear Phishing is a form of phishing in which the target users are specifically identified. For example, the aĴacker may research to find the email addresses of the Chief Executive Officer (CEO) of a company and other executives and only phish these people.
