Phishing is a social engineering attack in which criminals send deceptive messages that imitate a trusted sender to steal credentials, money or data, or to install malware. It remains the main way in, as ENISA counts it as about 60 percent of initial access vectors in Europe, and banking, insurance and healthcare are especially exposed.
