Phishers typically send mass emails that appear to come from trusted sources. These emails often contain spoofed links that direct recipients to fake websites designed to collect sensitive information. The emails may also include malicious attachments that install malware on the recipient's device.