The Q3 2025 phishing simulation roundup indicates that people interacted most with emails that impersonated colleagues or referenced internal systems or topics, indicating not so much that the phishing was aimed at tricking dopey users as it is about the understanding of human behavior.