Phishing
Phishing is a social-engineering attack that uses deceptive communications or content to impersonate a trusted source and induce disclosure of information or another unsafe action.
Software Security for Developers
A phishing attack is a social-engineering attack that impersonates a trusted party to trick a person into disclosing information or performing an unauthorized action.
- How it is used
- Protects authentication by addressing attacks against users who can access applications, infrastructure, or cloud consoles.
- How deep it goes
- Explains impersonation, credential capture, user fatigue, and origin-bound authentication through a detailed cloud-login scenario.
- Examples
- Uses a fake Google Cloud email and login page, stolen administrator credentials, a YubiKey, magic links, and OTPs.
- What you can do after
- Diagnose deceptive login flows and apply WebAuthn with physical security keys to validate the intended website.
Read how Software Security for Developers explains phishing →
Data-Driven Cybersecurity
A phishing attack deceives targets into disclosing information, executing actions, or providing access by impersonating a trusted source.
- How it is used
- Positions phishing as an evolving social-engineering threat, a monthly trend metric, and a possible root cause in incident response.
- How deep it goes
- Illustrates attack variants, charts attempt counts, and reconstructs credential compromise without detailing phishing-detection algorithms.
- Examples
- Uses a cloned-voice password-reset scenario, a 12-month attempts chart, and a financial-institution data breach.
- What you can do after
- Apply it via pandas and Matplotlib to chart phishing attempts and recommend proportionate email filtering and awareness training.
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
Phishing is a social engineering technique that uses deceptive messages or sites to trick targets into revealing information, clicking malicious links, or downloading malware.
- How it is used
- Frames phishing as a common social engineering attack that bypasses technical defenses by manipulating users.
- How deep it goes
- Defines deceptive delivery and target actions, then distinguishes four variants without detailing technical execution.
- Examples
- Uses deceptive emails, malicious links, malware downloads, sensitive-information requests, and simulated phishing emails.
- What you can do after
- Evaluate phishing attempts and respond appropriately through awareness and security training.
Read how Acing the CCNA Exam: Volume 2 Advanced Networking and Security explains phishing →
AI for Everyday IT
Phishing is a deceptive attempt to obtain information or induce harmful actions by impersonating a trustworthy sender or service.
- How it is used
- Deploys AI-assisted email inspection to identify phishing before users click links or disclose sensitive information.
- How deep it goes
- Explains source retrieval, Copilot prompting, and SPF and DKIM findings without requiring header or source-code expertise.
- Examples
- Uses Outlook source and header views, a direct Copilot classification prompt, and authentication failures as evidence.
- What you can do after
- Diagnose suspicious emails with Outlook source data and M365 Copilot before opening links or providing sensitive information.
Real-World Cryptography
Phishing is a social-engineering attack that persuades a person to disclose authentication information or perform an unsafe action.
- How it is used
- Frames phishing as the human-centered failure mode of one-time-password authentication.
- How deep it goes
- Explains the definition and a phone-based OTP scenario but stops short of a defensive procedure.
- Examples
- Uses an attacker’s login attempt, a fraudulent application employee, and a requested one-time password.
- What you can do after
- Evaluate authentication scenarios for human-targeting attacks that request one-time passwords.
Related concepts
- attack vectorkind of · An attack vector is a path, method, or mechanism through which an adversary can reach a target or carry out an attack.
- social engineeringkind of · Social engineering is the manipulation of people through deception, persuasion, or other social tactics to induce disclosure, access, or actions that may compromise security.
- spear phishingincludes · Spear phishing is a targeted phishing attack that uses personalized information or messages to deceive a specific individual or small group.
- security trainingused by · Security training is structured education that develops people’s knowledge and behaviors for recognizing threats and protecting systems, software, and information.
- passkeyaddressed by · A passkey is a passwordless, phishing-resistant authentication credential based on a public-key cryptographic pair and protected by an authenticator.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.