An airline phishing attack is a combination of two or more attack techniques. The attacker will either impersonate a travel agency or even an employee in HR or finance that is sending an airline ticket or e-ticket. The attacker leverages the legitimate appearance of the email to harvest the login credentials of the target using a fake login page. The second tool employed by the attacker is an advanced persistent threat embedded in an email attachment. In this attack, the malware will be executed upon the opening of the document. This is one of the highest success rates for phishing attacks.”]
Source: https://blog.barracuda.com/2017/03/30/threat-spotlight-the-airline-phishing-attack/