As a part of my work with the EDUCAUSE Awareness and Training working group, I put together a blog post about Phishing and Social Engineering. Check it out on the EDUCAUSE site:
https://er.educause.edu/blogs/2020/3/march-2020-making-phishing-attacks-history