In a phishing attack, the lure frequently takes the form of a convincing email. Attackers invest considerable effort to make sure their emails look as authentic as they can. These emails typically guide the recipients to a website controlled by the attacker, where malware is deployed or user credentials are intercepted.