What is phishing?
Phishing is a social engineering attack in which a fraudulent message, usually an email, tricks someone into clicking a malicious link, opening an attachment, entering their credentials or sending money. The message impersonates someone the target trusts.
How it works
Broad phishing campaigns go to thousands of people at once. Targeted variants include spear phishing aimed at one person, whaling aimed at executives, and business email compromise that impersonates a colleague or supplier.
Phishing now spans channels: text messages (smishing), phone calls (vishing), QR codes (quishing) and calendar invites.
Why it matters
Phishing remains one of the most common ways attackers gain a first foothold, and the volume is rising. In the 2026 State of Human Risk research with the Cyentia Institute, real phishing attempts per employee roughly doubled from 2024; targeted employees face about 14 a year, up from 8.
How Living Security helps
Living Security Phishing aims simulations by your risk data, not your calendar. Phishing Autopilot adjusts to each person, and every result feeds the Human Risk Index.
