← Back to overview

The Evolution of Phishing

You have already completed phishing training. You know to check links, spot spelling mistakes and avoid sharing credentials. Cybercriminals know this too. That is why they increasingly target well-trained employees.

The course Advanced Phishing explains how phishing has evolved from basic mass emails into highly targeted, sophisticated attacks that combine technology, psychology and AI. Attackers carefully research their targets, analyse organisational structures and use personal details to make attacks highly convincing.

The e-learning opens with a realistic scenario in which an employee is contacted by a fake IT specialist. Under time pressure, credentials are shared. The lesson is clear: phishing is no longer limited to email.

Participants then explore modern phishing techniques:

  • Spear phishing: personalised attacks based on real projects, colleagues or clients
  • CEO fraud: urgent requests appearing to come from senior management
  • Voice phishing (vishing): phone-based attacks exploiting urgency and authority
  • Video phishing: realistic deepfake video calls involving trusted individuals

A key focus is the role of AI and deepfake technology. With only seconds of audio, criminals can clone voices and convincingly impersonate colleagues, executives or even family members. Real-time video manipulation increases emotional pressure and reduces critical thinking.

The course highlights that security controls such as two-factor authentication are important, but not foolproof. Attackers use fake login pages, hijacked email threads, QR code phishing and even zero-click exploits to bypass defences.

For this reason, the course strongly emphasises human behaviour and verification. Employees learn practical strategies:

  • always verify requests via a second channel
  • call back using known contact details
  • use agreed code words
  • be extra cautious when urgency or emotion is involved

Participants also learn what to do if a mistake is made. Immediate reporting, password changes and open communication help limit damage and protect others.

The course concludes with a clear message: phishing will continue to evolve — and so must you. By staying alert, thinking critically and practising awareness, you remain the strongest line of defence.

What will participants learn?

After completing this course, participants will:

  • understand how phishing has evolved
  • recognise advanced phishing techniques such as vishing and video phishing
  • understand the role of AI and deepfakes in modern attacks
  • know why trained employees are targeted
  • verify requests using safe methods
  • respond correctly to phishing incidents

Who is this course for?

This course is suitable for:

  • employees who have completed basic phishing training
  • organisations seeking deeper security awareness
  • teams with access to sensitive or financial systems
  • employees aiming to stay ahead of evolving threats

Why this course is relevant right now

AI-driven phishing attacks are more convincing than ever. Training employees to recognise advanced techniques significantly reduces the risk of fraud, data breaches and reputational damage.