Phishing ranks low on the list of cyberattacks in terms of technological sophistication. Even more sophisticated phishing variants like spear phishing (focused and often personalized phishing attacks) and whaling (phishing attacks focused on high-profile or high-dollar targets) are focused more on social engineering than on technology.

Yet phishing remains one of the most effective types of attacks because it bypasses many network and endpoint protections. End-user training helps, but so can tools that detect and prevent phishing attacks.