Spearphishing Link to Internal Share

Deliver a targeted email containing a malicious or assessment link that directs the recipient to linked content or a landing page. For T1566.002, the link is used to gain initial access, such as by prompting the recipient to visit a site or download a payload; a click alone does not establish execution or compromise. A link used primarily to elicit credentials or other information for targeting is T1598.003 (Reconnaissance) and is a separate procedure.