Today, businesses are working hard to protect against phishing and have clear strategies around escalating suspicious emails to technical personnel and a wealth of cybersecurity awareness training.
Due to these factors and the increasing effectiveness of automated systems blocking phishing emails, sending large numbers of generic phishing messages hoping that a user may click on them has become less effective. Even simple changes like blocking email from domains that have only recently been registered filters out many phishing messages before they even reach users inboxes.
