Explore a comprehensive overview of phishing attacks and defense strategies in this BSides Knoxville 2015 conference talk. Delve into various types of phishing, including spear phishing and whaling, and learn about the setup and deployment of phishing campaigns through domain registration, email systems, and web server configurations. Discover techniques for credential harvesting, post-exploitation activities, and malware deployment. Gain insights into effective preparation, user awareness, detection, and response strategies to combat phishing threats. Examine the SpeedPhish Framework (SPF), an automated tool for conducting phishing exercises, and its potential future features. Enhance your understanding of this critical cybersecurity topic to better protect individuals and organizations from sophisticated phishing attempts.