Abstract:Internet technology is so pervasive today, for example, from online social networking to online banking, it has made people's lives more comfortable. Due the growth of Internet technology, security threats to systems and networks are relentlessly inventive. One such a serious threat is "phishing", in which, attackers attempt to steal the user's credentials using fake emails or websites or both. It is true that both industry and academia are working hard to develop solutions to combat against phishing threats. It is therefore very important that organisations to pay attention to end-user awareness in phishing threat prevention. Therefore, the aim of our paper is twofold. First, we will discuss the history of phishing attacks and the attackers' motivation in details. Then, we will provide taxonomy of various types of phishing attacks. Second, we will provide taxonomy of various solutions proposed in literature to protect users from phishing based on the attacks identified in our taxonomy. Moreover, we have also discussed impact of phishing attacks in Internet of Things (IoTs). We conclude our paper discussing various issues and challenges that still exist in the literature, which are important to fight against with phishing threats.

Phishing Attacks on Electronic Banking and its Prevention Strategies

Study on Phishing Attack Behaviours and Defence Model

Protection Against Phishing Attacks: A Survey

Phishing - A Growing Threat to E-Commerce

Phishing Attacks and Countermeasures Research

Phishing Attacks: Detection And Prevention

Phishing and Anti-Phishing Technique

Defending against Phishing Attacks: Taxonomy of Methods, Current Issues and Future Directions

Analysis of Phishing Attacks and Countermeasures

Research of Phishing Detection Technology

Survey on Phishing Detection Research

Some Recommended Protection Technologies for Cyber Crime Based on Social Engineering Techniques -- Phishing

Multilayer Approach to Defend Phishing Attacks

Phishing and Spear Phishing: examples in Cyber Espionage and techniques to protect against them

An Exploration Of The Design Features Of Phishing Attacks

An Examination of Prevalent Online Scams: Phishing Attacks, Banking Frauds, and E-Commerce Deceptions

A DNS based anti-phishing approach

Protect sensitive sites from phishing attacks using features extractable from inaccessible phishing URLs

An Analysis on Chinese Internet Banking Security Strategies

Combating phishing attacks via brand identity and authorization features

Analyzing the risk and financial impact of phishing attacks using a knowledge based approach