Vishing is an attack performed by phone (voice) rather than by email. Impersonation Pretending to be a friend or colleague on a social networking site in order to obtain additional personal information, possibly in preparation for a spear phishing attack.