Fraudulent attempt to steal sensitive information by disguising as a trustworthy source, typically via email.
Phishing is a social engineering attack where criminals send deceptive emails designed to trick recipients into revealing sensitive information, clicking malicious links, or downloading malware. Phishing emails often impersonate trusted entities—banks, Microsoft, delivery companies, or colleagues—and create urgency to bypass rational thinking. Modern phishing is sophisticated, using legitimate-looking domains, stolen branding, and personalised content. Phishing remains the most common initial attack vector for data breaches and ransomware, making email security and user awareness critical defences.
Why It Matters
The DSC Perspective:
Phishing is how most attacks start. A single clicked link can lead to credential theft, malware infection, or ransomware. Every organisation needs email security controls and regular awareness training to reduce phishing risk.