Phishing covers a social-engineering attack delivered by email, text message or a similar channel that tries to get the recipient to click a malicious link, open an attachment or hand over information directly. It maps to two MITRE ATT&CK techniques: T1566 (Phishing), used to get malware installed or credentials entered on a fake login page, and T1598 (Phishing for Information), used to get the target to simply reply with the information the attacker wants without compromising a system at all. An incident is filed under this type only when its source names phishing; many notices report only the result, such as ransomware, not how access began.
How many confirmed incidents are classified as Phishing Attack on Breach Census?
112 confirmed incidents are currently classified as Phishing Attack.
Which organization has the most confirmed Phishing Attack incidents?
ABM Industries Incorporated, with 2 confirmed incidents classified this way.
Which MITRE ATT&CK techniques does the Phishing Attack classification cover?
This classification maps to MITRE ATT&CK techniques T1566 (Phishing), T1598 (Phishing for Information).
What counts as a confirmed incident for the Phishing Attack classification?
An incident counts here once it carries the Phishing Attack attack-type classification and has reached the confirmed status described on the Methodology page; a bare claim or press report is not enough.