Phishing & Social Engineering

A fake login page copies a real sign-in screen to steal passwords, one-time codes, or authenticated sessions.

OAuth consent phishing tricks a user into granting a malicious app access to their account through a legitimate-looking consent screen.

Phishing is when an attacker tricks someone into revealing credentials or approving access, often through a convincing message that sends them to a fake login page.

QR code phishing (“quishing”) uses a QR code to hide a malicious URL that opens a browser link on a phone or workstation.

Spear phishing is targeted phishing that uses personal or company context to make the message and link feel legitimate.