Tricking users into clicking fake links to steal login credentials [6].
Running old versions of Windows or apps that haven't been patched against known exploits [5]. Hacking For Dummies
Actually testing the flaw to see how far an attacker could get [5]. 3. Common Vulnerabilities (And How to Spot Them) Tricking users into clicking fake links to steal