QR phishing - Quishing Quishing is phishing through a QR code. Instead of a visible link, the user is given an image to scan with their phone. The QR code then takes them to a fake pa …

Phishing Phishing is the most widespread form of social-engineering attack and, in a great many cases, the first link in any serious break-in. The attacker sends a messa …

SMS phishing - Smishing Smishing is phishing over SMS or messaging apps. The attacker sends a short message with a link, a request to confirm something, or an instruction for an urgent …

Spear Phishing Spear phishing is phishing cut to fit one person or a small group of users. Instead of sending the same message to thousands of addresses, the attacker first ga …

voice phishing - Vishing Vishing is phishing over the telephone. Instead of an email and a link, the attacker uses a voice, a phone number and the pressure of the moment. They present t …

Typosquatting … imilar domains around a brand and uses them for a phishing campaign.

Whaling Whaling is targeted phishing aimed at senior management, owners, directors and people who can approve large decisions. The target is not chosen by chance. The a …

Account Takeover … t is usually the destination of what came before: phishing, credential stuffing, token theft.

Botnet Attacks A botnet is used for DDoS, sending spam, phishing campaigns, password spraying, cryptocurrency mining, malware distribution and other work that needs quantity. …

MFA Fatigue … generated number to be entered. Safer still is a phishing-resistant factor (FIDO2, passkeys, hardware keys). Alongside that, consecutive requests should be lim …

Pretexting Unlike mass phishing, pretexting requires thorough preparation. The attacker uses publicly available information, LinkedIn, the company website, job adverts, ol …

SIM Swapping … d with personal details from leaked databases and phishing. The moment the number moves to their card, the real phone loses signal and every call and message go …

Token Theft … from application memory. Adversary-in-the-middle phishing, where a fake page forwards your login to the real service in real time, catches the token at the mom …

Watering Hole Attack The difference from phishing is that the victim does not have to be lured. They come on their own, suspecting nothing.

Wiper It arrives by the usual routes — phishing, a compromised account, an exploited vulnerability — and sometimes pretends to be ransomware, to buy time and do more …