Tag

What Is a Phishing Scam

Provides a foundational explanation of what a phishing scam is, how it works, and why it remains one of the most effective cyberattack methods. Breaks down common phishing techniques and teaches readers how to identify and report suspicious communications.

posts

Phishing Scams

What Is a Phishing Scam? A Real-World Guide for 2025

In January 2024, a finance employee at British engineering firm Arup transferred $25 million to threat actors after joining a video call with what appeared to be the company's CFO and other colleagues — all of them deepfake recreations. The attack started the way most do: with a phishing

Carl B. Johnson Dec 27, 2025 7 min read
Phishing Scams

What Is a Phishing Scam? A Security Pro's Real Talk

In January 2024, a finance employee at a multinational firm in Hong Kong transferred $25 million after a video call with what appeared to be the company's CFO and several colleagues. Every person on that call was a deepfake. The whole operation started with a single phishing email.

Carl B. Johnson Sep 18, 2024 6 min read
Phishing Scams

What Is a Phishing Scam? A Security Pro's Real Guide

In March 2022, the FBI's Internet Crime Complaint Center reported that phishing was the number one cybercrime type in 2021 — with over 323,000 complaints filed by victims in a single year. That number dwarfed every other category. If you've ever asked what is a phishing

Carl B. Johnson Sep 22, 2022 8 min read
Phishing Scams

What Is a Phishing Scam? A Security Pro's Real Guide

The $4.88 Million Email That Looked Completely Normal In 2024, IBM's Cost of a Data Breach Report pegged the average breach cost at $4.88 million — a record high. And phishing remained the most common initial attack vector. I've investigated dozens of these incidents firsthand,

Carl B. Johnson Feb 16, 2020 6 min read
Phishing Scams

What Is a Phishing Scam? A Security Pro's Real Guide

The $4.88 Million Email That Looked Completely Normal In 2023, a finance employee at a midsize manufacturing firm received an email from what appeared to be the CEO. It referenced a real acquisition the company was working on. It used the CEO's actual email signature. The employee

Carl B. Johnson Jun 12, 2019 7 min read