Email attacks began as basic spam and malware campaigns, and while these still exist, threats have rapidly evolved. Today’s attacks are far more sophisticated, using social engineering, spoofing, and account takeover to steal credentials and defraud organisations alongside a rise in advanced threats like ransomware.