Attacks facilitating phishing or social engineering