Internal Phishing

After access to an account or system inside an organization has been obtained, send targeted phishing messages to other users through trusted internal email or collaboration channels. Links or attachments may capture user-submitted credentials or deliver content intended to compromise additional users. The campaign relies on preexisting internal access; validating captured credentials and using them for later movement are separate procedures.