네트워크 보안이란? | 기업 네트워크 보안 - Cloudflare
네트워크 보안이란? 네트워크 보안은 내부 네트워크를 공격 및 데이터 유출로부터 보호하는 관행과 기술의 범주입니다. 여기에는 액세스 제어, 사이버 공격 방지, 맬웨어 ...
피싱 공격
사용자 교육: 많은 데이터 유출 및 맬웨어 감염은 사용자가 실수로 안전하지 않은 이메일 첨부 파일을 열거나, <anchor>피싱 공격</anchor> 의 결과로 로그인 자격 증명을 제공하거나, 다른 방식으로 외부 액세스를 허용하는 등 단순히 실수를 하기 때문에 발생합니다.내부 직원과 계약자는 안전을 유지하고 네트워크를 보호하는 방법을 알고 있어야 합니다.
What is a phishing attack? | Cloudflare
What is a phishing attack? \| Cloudflare

[skip to content](#main-content) [Sales: +1 (650) 319 8930](tel:+16503198930)

Support

[Log in](https://dash.cloudflare.com/login/?lang=en-US)

SolutionsProductsPricingResourcesPartnersWhy Cloudflare

Support

[Sign up](/plans/)

[Sign up](/plans/) [Contact sales](/plans/enterprise/contact/) [Log in](https://dash.cloudflare.com/login?lang=en-US)

[Log in](https://dash.cloudflare.com/login/?lang=en-US)

SolutionsProductsPricingResourcesPartnersWhy Cloudflare

Support

[Sign up](/plans/)

# What is a phishing attack?

Phishing attacks involved tricking a victim into taking some action that benefits the attacker. These attacks range from simple to complex, and can be spotted with the right awareness.

##### Learning Center

- [What is IAM?](/learning/access-management/what-is-identity-and-access-management/)

- [What is SASE?](/learning/access-management/what-is-sase/)

- Zero Trust security
- Authentication
- Remote access
- Access glossary
- theNET

#### Learning Objectives

After reading this article you will be able to:

- Define a phishing attack
- Explore common phishing attacks
- Learn ways to protect against phishing

Related Content

* * *

[What is IAM?](/learning/access-management/what-is-identity-and-access-management/) [Access control](/learning/access-management/what-is-access-control/) [VPN](/learning/access-management/what-is-a-vpn/) [Software-defined perimeter](/learning/access-management/software-defined-perimeter/) [Data loss prevention (DLP)](/learning/access-management/what-is-dlp/)

#### Want to keep learning?

Subscribe to theNET, Cloudflare's monthly recap of the Internet's most popular insights!

Subscribe to theNET

Refer to Cloudflare's [Privacy Policy](/privacypolicy/) to learn how we collect and process your personal data.

Copy article link

## What is a phishing attack?

“Phishing” refers to an attempt to steal sensitive information, typically in the form of usernames, passwords, credit card numbers, bank account information or other important data in order to utilize or sell the stolen information. By masquerading as a reputable source with an enticing request, an attacker lures in the victim in order to trick them, similarly to how a fisherman uses bait to catch a fish.

![A Phishing Attack](/img/learning/security/threats/phishing-attack/diagram-phishing-attack.png)

## How is phishing carried out?

The most common examples of phishing are used to support other malicious actions, such as [on-path attack](/learning/security/threats/on-path-attack/) and [cross-site scripting](/learning/security/threats/cross-site-scripting/) attacks. These attacks typically occur via [email](/learning/email-security/what-is-email/) or instant message, and can be broken down into a few general categories. It’s useful to become familiar with a few of these different vectors of phishing attacks in order to spot them in the wild.

Report

2023 Phishing Threats Report

[Get the\
report](/lp/2023-phishing-report/)

Report

Read the Q4 2023 DDoS Threat Landscape Report

[Get\
the report](/lp/ddos-threat-report-2023-q4/ )

#### Advanced-fee scam

This common email phishing attack is popularized by the “Nigerian prince” email, where an alleged Nigerian prince in a desperate situation offers to give the victim a large sum of money for a small fee upfront. Unsurprisingly, when the fee is paid, no large sum of money ever arrives. The interesting history is that this type of scam has been occurring for over a hundred years in different forms; it was originally known in the late 1800s as the Spanish Prisoner scam, in which a con artist contacted a victim to prey on their greed and sympathy. The con artist is allegedly trying to smuggle out a wealthy Spanish prisoner, who will reward the victim handsomely in exchange for the money to bribe some prison guards.

This attack (in all its forms) is mitigated by not responding to requests from unknown parties in which money has to be given to receive something in return. If it sounds too good to be true, it probably is. A simple Google search on the theme of the request or some of the text itself will often bring up the details of the scam.

#### Account deactivation scam

By playing off the urgency created in a victim who believes an important account is going to be deactivated, attackers are able to trick some people into handing over important information such as login credentials. Here’s an example: the attacker sends an email that appears to come from an important institution like a bank, and they claim the victim’s bank account will be deactivated if they do not take action quickly. The attacker will then request the login and password to the victim’s bank account in order to prevent the deactivation. In a clever version of the attack, once the information is entered, the victim will be directed to the legitimate bank website so that nothing looks out of place.

This type of attack can be countered by going directly to the website of the service in question and seeing if the legitimate provider notifies the user of the same urgent account status. It’s also good to check the URL bar and make sure that the website is secure. Any website requesting a login and password that is not secure should be seriously questioned, and nearly without exception should not be used.

#### Website forgery scam

This type of scam is commonly paired with other scams such as the account deactivation scam. In this attack, the attacker creates a website that is virtually identical to the legitimate website of a business the victim uses, such as a bank. When the user visits the page through whatever means, be it an email phishing attempt, a hyperlink inside a forum, or via a search engine, the victim reaches a website which they believe to be the legitimate site instead of a fraudulent copy. All information entered by the victim is collected for sale or other malicious use.

In the early days of the Internet, these types of duplicate pages were fairly easy to spot due to their shoddy craftsmanship. Today the fraudulent sites may look like a picture-perfect representation of the original. By checking the URL in the web browser, it is usually pretty easy to spot a fraud. If the URL looks different than the typical one, this should be considered highly suspect. If the pages listed as insecure and [HTTPS](/learning/ssl/what-is-https/) is not on, this is a red flag and virtually guarantees the site is either broken or a phishing attack.

Sign Up

Security & speed with any Cloudflare plan

[Start for free](/plans/)

## What is spear phishing?

This type of phishing is directed at specific individuals or companies, hence the term [spear phishing](/learning/access-management/spear-phishing/). By gathering details or buying information about a particular target, an attacker is able to mount a personalized scam. This is currently the most effective type of phishing, and accounts for over 90% of the attacks.

## What is clone phishing?

Clone phishing involves mimicking a previously delivered legitimite email and modifying its links or attached files in order to trick the victim into opening a malicious website or file. For example, by taking an email and attaching a malicious file with the same filename as the original attached file, and then resending the email with a [spoofed email](/learning/ssl/what-is-domain-spoofing/) address that appears to come from the original sender, attackers are able to exploit the trust of the initial communication in order to get the victim to take action.

## What is whaling?

For attacks that are directed specifically at senior executives or other privileged users within businesses, the term whaling is commonly used. These type of attacks are typically targeted with content likely to require the attention of the victim such as legal subpoenas or other executive issues.

Another common vector of this style of attack is whaling scam emails that appear to come from an executive. A common example would be an email request coming from a CEO to someone in the finance department requesting their immediate help in transferring money. Lower-level employees are sometimes fooled into thinking the importance of the request and the person it’s coming from supersede any need to double check the request’s authenticity, resulting in the employee transferring large sums of money to an attacker.

## How does Cloudflare help organizations defend against phishing attacks?

Phishing can occur over a variety of [attack vectors](/learning/security/glossary/attack-vector/), but one of the biggest is email. Many email providers automatically try to block phishing emails, but sometimes they still get through to users, making [email security](/learning/email-security/what-is-email-security/) an important concern.

Cloudflare Area 1 Email Security offers advanced phishing protection, crawling the Internet and investigating phishing infrastructure to identify phishing campaigns in advance. [Learn how Cloud Email Security works](https://www.cloudflare.com/zero-trust/products/email-security/).

Getting Started

- [Free plans](/plans/free/)
- [For enterprises](/enterprise/)
- [Compare plans](/plans/)
- [Get a recommendation](/about-your-website/)
- [Request a demo](/plans/enterprise/demo/)
- [Contact sales](/plans/enterprise/contact/)

About Access Management

- [What is IAM?](/learning/access-management/what-is-identity-and-access-management/)
- [Access control](/learning/access-management/what-is-access-control/)
- [Network perimeter](/learning/access-management/what-is-the-network-perimeter/)

About Zero Trust

- [Zero Trust security](/learning/security/glossary/what-is-zero-trust/)
- [Two-factor authentication](/learning/access-management/what-is-two-factor-authentication/)
- [Role-based access control (RBAC)](/learning/access-management/role-based-access-control-rbac/)
- [Multi-factor authentication](/learning/access-management/what-is-multi-factor-authentication/)
- [What is SAML?](/learning/access-management/what-is-saml/)
- [Remote workforce security](/learning/access-management/remote-workforce-security/)
- [What is OAuth?](/learning/access-management/what-is-oauth/)
- [Browser isolation](/learning/access-management/what-is-browser-isolation/)
- [Castle-and-moat security](/learning/access-management/castle-and-moat-network-security/)
- [Mutual TLS (mTLS)](/learning/access-management/what-is-mutual-tls/)
- [What is ZTNA?](/learning/access-management/what-is-ztna/)
- [Principle of least privilege](/learning/access-management/principle-of-least-privilege/)
- [Security service edge (SSE)](/learning/access-management/security-service-edge-sse/)
- [Microsegmentation](/learning/access-management/what-is-microsegmentation/)
- [How to implement Zero Trust](/learning/access-management/how-to-implement-zero-trust/)

VPN Resources

- [VPN](/learning/access-management/what-is-a-vpn/)
- [Business VPN](/learning/access-management/what-is-a-business-vpn/)
- [VPN security](/learning/access-management/vpn-security/)
- [VPN speed](/learning/access-management/vpn-speed/)

Glossary

- [What is account takeover?](/learning/access-management/account-takeover/)
- [What is authentication?](/learning/access-management/what-is-authentication/)
- [Authn vs. Authz](/learning/access-management/authn-vs-authz/)
- [What is a CASB?](/learning/access-management/what-is-a-casb/)
- [Data loss prevention (DLP)](/learning/access-management/what-is-dlp/)
- [DNS filtering](/learning/access-management/what-is-dns-filtering/)
- [GDPR remote access](/learning/access-management/gdpr-remote-access/)
- [Identity](/learning/access-management/what-is-identity/)
- [Identity as a service](/learning/access-management/what-is-identity-as-a-service/)
- [Identity provider (IdP)](/learning/access-management/what-is-an-identity-provider/)
- [What is an insider threat?](/learning/access-management/what-is-an-insider-threat/)
- [Mutual authentication](/learning/access-management/what-is-mutual-authentication/)
- [Network segmentation](/learning/access-management/what-is-network-segmentation/)
- [Phishing attack](/learning/access-management/phishing-attack/)
- [What is the RDP?](/learning/access-management/what-is-the-remote-desktop-protocol/)
- [RDP security](/learning/access-management/rdp-security-risks/)
- [Secure web gateway](/learning/access-management/what-is-a-secure-web-gateway/)
- [What is shadow IT?](/learning/access-management/what-is-shadow-it/)
- [Software-defined perimeter](/learning/access-management/software-defined-perimeter/)
- [Spear phishing](/learning/access-management/spear-phishing/)
- [What is SSO?](/learning/access-management/what-is-sso/)
- [Token-based authentication](/learning/access-management/token-based-authentication/)
- [URL filtering](/learning/access-management/what-is-url-filtering/)

Learning Center Navigation

- [Learning Center Home](/learning/)
- [DDoS Learning Center](/learning/ddos/what-is-a-ddos-attack/)
- [CDN Learning Center](/learning/cdn/what-is-a-cdn/)
- [DNS Learning Center](/learning/dns/what-is-dns/)
- [Serverless Learning Center](/learning/serverless/what-is-serverless/)
- [SSL Learning Center](/learning/ssl/what-is-ssl/)
- [Security Learning Center](/learning/security/what-is-web-application-security/)
- [Performance Learning Center](/learning/performance/why-site-speed-matters/)
- [Cloud Learning Center](/learning/cloud/what-is-the-cloud/)
- [Bots Learning Center](/learning/bots/what-is-a-bot/)
- [Network Layer Learning Center](/learning/network-layer/what-is-the-network-layer/)
- [Privacy Learning Center](/learning/privacy/what-is-data-privacy/)
- [Video Streaming Learning Center](/learning/video/what-is-streaming/)
- [What is SASE?](/learning/access-management/what-is-sase/)
- [Email Security Learning Center](/learning/email-security/what-is-email-security/)
- [AI Learning Center](/learning/ai/what-is-artificial-intelligence/)

[Facebook](https://www.facebook.com/cloudflare "Facebook")[X](https://x.com/cloudflare "X")[LinkedIn](https://www.linkedin.com/company/cloudflare "LinkedIn")[Youtube](https://www.youtube.com/cloudflare "Youtube")[Instagram](https://instagram.com/cloudflare "Instagram")

© 2024Cloudflare, Inc. [Privacy Policy](/privacypolicy/) [Terms of Use](/website-terms/) [Report Security Issues](/disclosure/) ![privacy options](/img/privacyoptions.svg)Cookie Preferences [Trademark](/trademark/)