Clone phishing attacks use Beforehand sent but legit email messages that have both a website link or an attachment. Attackers come up with a copy -- or clone -- on the legit email and exchange links or attached documents with destructive types. Victims will often be tricked into clicking to the destructive url or opening the destructive attachment.