Phishing is the most common way social engineers employ to trick users into clicking malicious links or visiting malicious websites to spread malware.
Social engineers often make phishing attempts through emails, social media sites, phone calls, or text messages to exploit human error.