### Overview
Following the detection of a phishing email, an analysis was conducted to understand the tactics employed by Vice Society to gain initial access.

### Key Findings
- **Target Audience**: The phishing email was directed primarily at school administrators and IT staff, mimicking official education department communications.
- **Social Engineering**: The email contained urgent language, prompting recipients to update security credentials immediately.
- **Payload**: A malicious link disguised as a document download was identified, leading to a credential harvesting site.

### Recommendations
- Conduct phishing awareness training for staff.
- Implement email filtering solutions to detect and quarantine suspicious emails.