Although $q,$ phishing uses email, it takes a more targeted approach. Cybercriminals start by using open$-$source intelligence $($OSINT$)$ to gather information from published or publicly available sources like social media or a company's website.

Clone

Watering hole

Email

Spear