> initializing security_briefing...
Don't Take
the Bait
Phishing Scams Awareness
How to spot, stop, and report today's phishing threats
[ STATUS: VIGILANT ]
An email envelope caught on a fishing hook
> ls ./agenda

Mission Briefing

01Understanding Phishing
02The Threat by the Numbers
03Common Attack Types
04Business Email Compromise
05AI-Powered Phishing & Deepfakes
06Spotting & Stopping Attacks
07Real-World Case Studies
08Protecting Our Organization
> whatis phishing

What Is Phishing?

DEFINITION

A social engineering attack where criminals impersonate trusted people or organizations to steal sensitive information.

3.4B

spam emails sent every day. Phishing is the most widespread form of cybercrime.

COMMON TACTICS
Fake emails
Posing as banks, employers, or service providers
Counterfeit websites
Look-alike login pages that harvest passwords
Malicious links & files
One click can install malware or open a trap
Data theft
Credentials, card numbers, and personal data
> cat threat_stats.log

The Threat by the Numbers

94%

of organizations faced phishing attacks in 2025

3.4B

phishing emails sent every day

853K

phishing attacks logged in Q4 2025 (APWG)

96%

of phishing attacks arrive by email

57.9%

of phishing emails detected (Sep 2024 – Feb 2025) came from compromised, legitimate accounts. A familiar sender is no guarantee of safety.

> cat business_impact.log

The Cost to Business

80–95%

of human-related breaches start with phishing

92%

of businesses had at least one compromised email account

29%

of small and mid-sized businesses hit by deepfake schemes

$4.44M

average cost of a data breach (IBM, 2025)

Hooded hacker at a laptop

Most breaches begin
with a single click.

> ls ./attack_types

Know Your Phish

Spear Phishing

Personalized attacks aimed at specific people or teams

Whaling

Targets senior leaders such as CEOs, CFOs, and partners

Clone Phishing

A real email re-sent with malicious links swapped in

Smishing

Phishing delivered by SMS text message

Vishing

Voice calls posing as banks, IT, or vendors

Quishing

QR codes that lead to credential-stealing sites

CEO Fraud

Impersonating leadership to demand urgent payments

A fish eyeing a password on a hook

7 lures, 1 goal: your data

> trace --attack BEC

Business Email Compromise

Criminals impersonate executives, vendors, or partners to trick employees into wiring money or handing over sensitive data.

HOW IT WORKS
1Research the company and identify key people
2Compromise or spoof a trusted email account
3Send an urgent request posing as an executive or vendor
4Money is wired or sensitive data is handed over
$3.05B

in reported BEC losses in 2025 (FBI IC3)

#2

costliest cybercrime type reported to the FBI in 2025

Wire transfers make up most BEC losses
> run ai_threat_scan

AI-Powered Phishing

1,210%

surge in AI-enabled scams in 2025, vs. 195% for traditional fraud

$40B

projected losses by 2027

Deepfake Vishing
  • AI clones the voices of bosses, family, and colleagues
  • 49% of companies hit by audio/video deepfake fraud (2024)
  • Deepfake fraud cases surged 3,000% in 2024
AI-Built Fake Sites
  • Convincing phishing sites built in minutes
  • Pages adapt to each target's language and habits
> trace --kill-chain

Anatomy of an Attack

STEP 01
Recon

Research targets online and on social media

→
STEP 02
Takeover

Hijack real accounts or create look-alikes

→
STEP 03
Craft

Write a personalized, convincing lure

→
STEP 04
Deliver

Send by email, SMS, phone, or social media

→
STEP 05
Harvest

Steal credentials, money, or data

Break any link in the chain and the attack fails. You are the strongest link.
> inspect suspicious_email.eml

Spot the Red Flags

Inbox (1)
From: IT Support <helpdesk@micros0ft-support.co>3
URGENT: Your account will be closed in 24 hours1
Dear user, we detected unusual activity. Reply with your password immediately or lose access to your mailbox.5
Verify Nowhttp://login-verify.xyz/ms2
Invoice_Final.pdf.exe4
1
Urgent or threatening tone
“Act now or lose access”
2
Suspicious links
Hover to see the real destination
3
Mismatched sender
Check the full address, not the name
4
Unexpected attachments
.exe, .zip, or files you didn't expect
5
Requests for sensitive info
No real company asks for passwords by email
> deploy --defenses

Prevention Strategies

You
  • Verify the sender before responding
  • Never share passwords or sensitive data by email
  • Use a password manager and MFA
  • Keep software and security tools updated
  • Report suspicious messages to IT
  • Slow down when a message feels urgent
Our Organization
  • Run regular security awareness training
  • Deploy email filtering and security tools
  • Require call-back verification for payment requests
  • Maintain an incident response plan
  • Monitor for compromised accounts
> cat ./case_files/*

Real-World Case Files

Google & Facebook
2013–2015
$100M+

A scammer posed as a real hardware supplier and sent forged invoices that were paid for two years.

Ubiquiti Networks
2015
$46.7M

Attackers impersonated executives by email and directed staff to wire funds overseas.

Twitter
2020
130 accts

Phone spear-phishing of employees gave attackers internal tools to hijack high-profile accounts.

Arup
2024
~$25M

An employee joined a video call with a deepfaked CFO and colleagues, then sent 15 transfers.

> run checklist.sh

Your Protection Checklist

INDIVIDUAL
ORGANIZATIONAL
> echo $KEY_TAKEAWAYS

Key Takeaways

01
Phishing is the #1 attack vector
80–95% of breaches start with it
02
AI is making scams more convincing
AI-enabled scams surged 1,210% in 2025
03
People are the last line of defense
Technology alone isn't enough
04
Always verify
Check the sender, links, and requests before acting
05
Layered defense works
Combine training, tools, and clear policies
Shield with a padlock and check mark

Your awareness is
your best defense.

> session.end()
Questions?
When in doubt, report it out.

Contact your IT security team about any suspicious email, text, or call.

RESOURCES