"Adversaries may send phishing messages to elicit sensitive information that can be used during targeting. Phishing for information is an attempt to trick targets into divulging information, frequently credentials or other actionable information." [1]. Gathering data from the victim is the final objective.
| ID | Mitigation | Description |
|---|---|---|
| M1017 | User Training |