A social engineering attack that tricks victims into revealing sensitive information or installing malware, typically via deceptive emails or messages.
Phishing remains one of the most common initial access methods in real attacks, because it targets people rather than technical vulnerabilities. Recognizing and responding to phishing is core SOC analyst work.
