They craft region-specific, natural language phishing emails that are challenging to detect. To counter this, organizations should assume higher effectiveness and employ automation measures. User education is also crucial in recognizing and thwarting phishing attempts. Technical solutions alone can’t guarantee 100% protection, as phishing is not just a technological but also a psychological problem. Training can help users recognize and prevent such attacks.