Most cyber attacks start with a social engineering attempt and, most often that not, it takes the form of a phishing email.