“Successful credential compromise through phishing attacks may lead to data theft or business email compromise (BEC) attacks ...