A literature review on classification of phishing attacks

Phishing is a fraudulent activity through which the phisher/attacker tries to lure internet users into stealing their personal information/credentials to gain financially Phishing is comparable to fishing, which gives a different meaning; in phishing, the attacker uses bait (sending an email with an embedded hyperlink that redirects to a fraudulent site) to capture the internet users' credentials. Earlier, the hackers were known as Phreaks (a Phreak is someone who breaks into the telephone networks illegally to make free long-distance phone calls or to tap phone lines) and are closely related to each other. The reason for replacing "f" with "ph" is to link the phishing scams with phreaks [2, 3]. For the past two decades, phishing has become the most dangerous attack, and plenty of attack is taking place every day [4] The first phishing scam was recorded on 2nd Jan 1996 on American online (AOL) that provides internet services [2].