Phishing is the preferred technique among threat actors, according to a new report.