From hackercombat.com
Phishing is a way to extract confidential data from individuals and businesses. Mostly by creating fake Web pages or send emails to disclose login names, passwords, credit card information, etc. Once cybercriminals have the data that they are looking for, they can easily steal money and personal information from the poor victims. Cybercriminals also deploy malware which installs itself on the target computer, whose purpose is often to break into corporate networks and steal confidential data, but in severe cases, it tries to destroy important information if no ransom payment is paid by the victim.
Phishing that pulls information from a specific predefined target is called “spear phishing.” Attackers skillfully use persuasive information such as names, family structure, and friendships in order to extract information that can be used for crime from targets and open attachments, but in cyberspace, criminals misuse. There are plenty of trails of online activity that are convenient for them.