Phishing attacks or ‘scams’, rely on human emotions such as fear and/or kindness to get an individual to provide information that they wouldn’t otherwise offer. In an organization with poor security culture, bad habits like automatic email forwarding can occur, putting everyone at risk.