Phishing remains the primary method used by attackers to gain initial access to networks, according to a recent report.