Credential stealing emails typically include malicious attachment like of type HTML and PDF that are specifically crafted to capture login credentials or solicit sensitive personal information. These emails often mimic legitimate communications from reputable sources to deceive recipients into providing their usernames, passwords, or other private data. The end goal for attackers is to gain unauthorized access to accounts or sensitive systems.

Fraudulent website phishing emails are deceptive messages that employ social engineering tactics to trap recipients in fraudulent schemes. Typically, these emails contain compelling messages crafted to lure users to click on a link or open an attachment. These actions redirect users to scam websites expertly designed to execute a range of online frauds, including gift scams, shipment scams, and Bitcoin scams. Each scam aims to manipulate users into divulging personal information or making financial transactions under false pretenses.

Technical Support Scam phishing emails use fear tactics by falsely alerting users to virus infections on their computers through email links or attachments that lead to deceptive websites. These sites urge users to take immediate action by calling a "technical support" number and connecting them to scammers pretending to be technicians. Once they gain the user's trust and remote access to the computer, these fraudsters can install malware, steal sensitive data, or alter system settings.

Rogueware emails are deceptive phishing schemes that lure recipients into downloading dangerous software. These emails usually include links leading to websites or attachments loaded with harmful binaries like spyware, malware, or rogue browser extensions. Crafted with social engineering tactics, the content of these emails is designed to entice users to click on the links and download the malicious software. The primary objectives of rogueware emails are to steal personal information, secure unauthorized access to computer systems, or recruit devices into botnets for illicit activities.

QR phishing, also known as Quishing, is a deceptive tactic where cybercriminals embed malicious QR codes inside email body or attachments. Scanning these codes leads users to fraudulent websites that closely resemble legitimate ones. The purpose of these sites is to deceive individuals into submitting sensitive data such as login credentials, personal information, or financial details.