Attack
Phishing
Messages that impersonate someone trusted to get people to click, log in or pay.
Phishing arrives by email, text (smishing) or phone (vishing) and aims to steal credentials, deliver malware or trigger payments. Phishing-resistant MFA, such as passkeys and security keys, defeats the credential-stealing kind because the login only works on the real site.
Phishing in the news
Recent stories that mention it.
Related
- DefenceMFA · Multi-factor authenticationRequiring a second proof besides a password, such as an app prompt, a code or a security key.
- AttackBusiness email compromise · BECFraud that uses a hijacked or spoofed work email account to redirect payments.
- AttackInfostealerMalware that grabs saved passwords, browser cookies and crypto wallets from an infected computer.
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms