Phishing
Phishing is a cyber attack that uses deceptive emails, messages, or websites to trick recipients into revealing sensitive information such as passwords or financial data, or into taking harmful actions.
Understanding Phishing
Phishing attacks impersonate trusted organizations, colleagues, or services to create urgency and lower the recipient's guard. Common tactics include fake login pages that steal credentials, malicious attachments that install malware, and urgent requests for wire transfers or gift cards impersonating executives. Modern phishing has become increasingly sophisticated: AI-generated phishing emails are personalized, grammatically correct, and highly convincing. Security awareness training and technical controls like email authentication and spam filtering are the primary defenses.
How GAIA Uses Phishing
GAIA can help identify suspicious emails by flagging messages with phishing indicators: unusual sender addresses, requests for credentials or wire transfers, unexpected urgency from known contacts, and links to suspicious domains. GAIA treats emails requesting sensitive actions with extra caution and surfaces them for your explicit review rather than acting autonomously.
Related Concepts
Spam Filter
A spam filter is an automated system that evaluates incoming emails against criteria including sender reputation, content analysis, and authentication checks to identify and route unsolicited or malicious messages away from the primary inbox.
Two-Factor Authentication (2FA)
Two-factor authentication (2FA) is a security mechanism that requires users to provide two separate forms of verification before accessing an account: something they know (password) and something they have (a code from an authenticator app or hardware key) or something they are (biometrics).
Email Deliverability
Email deliverability is the measure of how successfully sent emails reach their intended recipients' inboxes rather than being filtered to spam folders or rejected by email servers.
Social Engineering
Social engineering is a manipulation technique that exploits human psychology — trust, urgency, authority, or fear — to trick individuals into revealing sensitive information, granting access, or taking harmful actions.
