When it comes to bad email, spam gets most of the ink. Lots of articles get written, reports get issued, and data gets crunched, all in the service of defining and describing the problem of spam. Spam, you might say, has a really good PR strategy. Phishing, on the other hand, flies much more under the radar. This shouldn't be the case. While phishing attacks seem to represent a smaller volume of messages (and hard data on that piece is difficult to find), they are extremely destructive.