1797
The phishing messages pretend to be sent from a travel agency or a someone inside the target firm , they include a weaponized document or embed a malicious link .
 ( phishing: pretend to be sent from,  The phishing messages: tool, a travel agency: trusted entity, someone: trusted entity, the target firm: trusted entity) 
Locate the role in the text that participated in the event based on the event type and return it in the event list. 
 Option: Event type: phishing, data breach, ransom, discover vulnerability, patch vulnerability, Arguments type: vulnerable system, capabilities, vulnerability, number of victim, issues addressed, compromised data, damage amount, common vulnerabilities and exposures, victim, patch number, number of data, tool, discoverer, time, purpose, place, payment method, releaser, vulnerable system version, attacker, supported platform, patch, price, vulnerable system owner, trusted entity, attack pattern. 
Text: {0} 
Answer:
 ( phishing: pretend to be sent from,  The phishing messages: tool, a travel agency: trusted entity, someone: trusted entity, the target firm: trusted entity) 