Yes , security . But unfortunately isn’t only respect hacking and hackers or focused on high security level.
What is concretely the modern concept of security? I’m talking about security for everyone using internet and net-services that is actually delegated to giant corporations.
However , big is focused on marketing and advertising , so usually doesn’t provide the necessary security to customers.
Moreover legislation is inefficient or obsolete, online transaction as e-banking is very popular , there are a lot of vulnerabilities which may not be caught up by most service providers and browser vendors , spamming technology is very lamer-friendly . All encourages crackers in phishing or illegal business.
The modern reality of phishing uses social engineering, spam and fake websites obviously with a spoofed identity convincing victims to visit exploited url or to login in fake look like original.

Attackers exploit web browsers using a 0-day bug, unfixed by vendors , to install a malware or infostealer, or dangerous web features like activeX , flash , javascript , xml or technologies like url obfuscation attack , visual spoofing in modern browsers , clickjacking , cross site scripting stoling account credentials, csrf , DNS server poisoning sniffing password information even in the HTTPS connection.

There are a lot of examples of phishing , Paypal , E-bay , Banks and so on.
There are a lot of phishing locations , Usa , Corea , China , Brazil and so on.
Old hackers aren’t involved in , attackers are frequently script kiddies , crackers and generally not properly coders . However they are dangerous for normal users , very very dangerous , even a fake login can be fatal.
Law is impotent and obsolete , there isn’t a content security policy , normal users are unprepared and uninformed . So phishing is a catastrophic reality that sees hackers exploits, sources and kits used by script kiddies to steal victims. Well.