Evil Corp initiated their attack with a targeted phishing campaign, leveraging social engineering to trick Garmin employees into opening malicious attachments. This step marks the beginning of the attack, setting the stage for further compromise.