Phishing Attacks Survey: Types, Vectors, and Technical Approaches

Abstract

Phishing attacks, which have existed for several decades and continue to be a major problem today, constitute a severe threat in the cyber world. Attackers are adopting multiple new and creative methods through which to conduct phishing attacks, which are growing rapidly. Therefore, there is a need to conduct a comprehensive review of past and current phishing approaches. In this paper, a review of the approaches used during phishing attacks is presented. This paper comprises a literature review, followed by a comprehensive examination of the characteristics of the existing classic, modern, and cutting-edge phishing attack techniques. The aims of this paper are to build awareness of phishing techniques, educate individuals about these attacks, and encourage the use of phishing prevention techniques, in addition to encouraging discourse among the professional community about this topic.

Robotics cyber security: vulnerabilities, attacks, countermeasures, and recommendations

“…This led the authors in [167] to manage the use of such attack in order to test it on social robots to prove how insecure they are, as well as to highlight their lack of authentication. • Phishing attacks are still ongoing with a variety of phishing attack types [168,169] targeting robotic employees and firms with different privileges and access level. This can lead to the exposure of their robotic devices inuse and lead to their compromising and loss of control.…”

A phishing Mitigation Solution using Human Behaviour and Emotions that Influence the Success of Phishing Attacks

“…As mentioned above, we suggest that companies or solution developers use the dataset of users' responses to real and simulated phishing attacks to train the supervised machine learning model. They can provide the machine learning model with training data from phishing simulation results and/or logs of users' responses to real phishing emails (for example, by integrating the Risk Score module with phishing detection and prevention solutions [35,36]) that contains user's response to phishing emails (e.g. a label that identifies whether the user clicked on a phishing link) and the user's behaviour/emotion score (e.g.…”

Intrusion Detection in Critical Infrastructures: A Literature Review

“…Moreover, in [10], the authors presented a review of SQL injection attacks. The next paper introduces a survey of phishing attacks [11]. The research article in [12] investigates brute force attacks which aim to find the configurations of an IoT network.…”