• Employee of an reputable organization receives an email from a  fraudster
  • The mail seems to be from established legitimate organization or enterprise
  • The mail addresses the person specifically and uses mail id and other details that seems to be from some official or trusted source or person in authority.
  • It prompts the user to give away sensitive information or leads them to malware infested websites, to steal the data or to attack organisations network.