A phishing scam often comes from a threat actor disguised as a reputable individual or organization who sends fraudulent emails. Their goal is to obtain sensitive data or inflect a victim's system with destructive malware.