Adversaries use socially engineered email containing a malicious link to seek initial access; the recipient is prompted to visit a destination or download content. ATT&CK T1566.002 covers this link-delivery vector, while attachment delivery is a separate sub-technique. The steps here are limited to an authorized, benign GoPhish click-tracking simulation and do not cover payload execution, credential collection, or command and control.
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER
RESTRICTED_ACCESS_BLUR_MARKER