( < fishing, "kalapüük") (loe: ph-, mitte f-)
Õ: kalastus -- simultaanselt,
õngitsemine -- üksikadressaadiga

olemus
teesklus, mille sooritaja saadab tundliku teabe saamiseks sõnumeid, mis näivad tulevat usaldatavast allikast, näiteks sotsiaalvõrgust, oksjonisaidist, pangast

Wiktionary:
(computing) the malicious act of keeping a false website or sending a false e-mail with the intent of masquerading as a trustworthy entity in order to acquire sensitive information, such as usernames, passwords, and credit card details

ISO/IEC 27032:
petturlik protsess, millega elektroonilises suhtluses
usaldatavat olemit teeseldes püütakse saada
privaatset või konfidentsiaalset teavet
Märkus 1 Kalastus võib toimuda
suhtlusosavusega või tehnilise pettusega.
= fraudulent process of attempting to acquire private or confidential information by masquerading as a trustworthy entity in an electronic communication
Note. Phishing can be accomplished by using social engineering or technical deception.

ülevaateid
https://www.checkbook.org/washington-area/phishing-scams-is-your-financial-institution-helping-cyberthieves/

https://en.wikipedia.org/wiki/Phishing

https://www.fortinet.com/resources/cyberglossary/types-of-phishing-attacks

https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/phishing-trends?view=o365-worldwide

tõrje
https://www.bluevoyant.com/knowledge-center/8-phishing-types-and-how-to-prevent-them

http://www.blackhat.com/presentations/bh-europe-08/Rosiello/Presentation/bh-eu-08-rosiello.pdf

https://www.imperva.com/learn/application-security/phishing-attack-scam/

https://www.malwarebytes.com/phishing/

https://www.ijera.com/papers/Vol2_issue2/BG22350355.pdf

vt ka
- harpuunimine
- kalastustõrje
- noodapüük, farming
- SMS-kalastus
- telefonkalastus