An attack involving malicious code delivered through emails is considered a:
Incident categorization frameworks used in incident handling classify an incident primarily by the nature of the malicious activity involved rather than by the channel used to deliver it; an attack in which malicious code (a virus, worm, trojan, or other malware) is delivered as an email attachment or link is fundamentally a malicious-code incident, with email serving only as the delivery vector, so it is classified as a malware-based attack rather than as a distinct "email attack" category or a multiple-component incident, since no additional independent incident type (such as denial of service or unauthorized access) is inherently combined with it.
Community Discussion