A social engineering technique that tricks a person into revealing credentials or installing malware, often via email, SMS (smishing), or voice calls (vishing). Digital investigations may collect headers, URLs, hosting records, and device artifacts of credential entry or payload execution.
