Phishing involves tricking individuals into disclosing sensitive information or installing malware through deceptive emails. * Whaling: A specific type of phishing targeting high-profile individuals. * Insider threat: Malicious activities by someone within the organization. * Phishing: General deceptive emails to trick users into compromising information or installing malware. * Vishing: Voice phishing, conducted over the phone. * Evil twin: A rogue Wi-Fi access point mimicking a legitimate one to intercept data. Reference: CompTIA A+ Exam Objectives [220-1102] - 2.4: Explain common social engineering attacks, threats, and vulnerabilities.