About 95 percent of targeted attacks begin with so-called phishing attempts - bogus emails designed to trick users into entering their log-in information or other sensitive data, according to a 2013 report by Verizon Communications Inc on data breaches.