Phishing/social engineering

Phishing/social engineering — fake emails or calls tricking staff into giving up credentials or money. Remedy: staff training, email filtering, verify requests via a second channel.