A typical phishing attack starts with a threat actor sending mass amounts of emails in hopes of getting anyone to click on malicious links.
The intent could be to deploy ransomware, to steal existing account credentials, to acquire enough information to open a new fraudulent account, or simply to compromise an endpoint.