
Phishing
Phishing attacks are a type of cyberattack that utilizes social engineering to gain unauthorized access to the target. These attacks focus on penetrating the defenses of the person rather than the system. The deceived victim takes actions to let the seemingly innocuous entity through the defenses.
Example:
An attacker uses the spoofed email customer_support@apple.com to send a phishing email to their victim. The email states that the victim has been hacked and that they need to reset their password. There is a link in the email that the victim can click on to reset their password. However, this link takes them to a fake website that looks like the real Apple website where they are prompted to enter their password. In this scenario, Apple's system defenses are powerful, but the victim has unknowingly let the attacker through.