“most hacker attacks are phishing attacks”, while phishing is prevelant, password guessing and spraying campaigns are far more common. I can show you the logs where we get thousands of login attempts daily, we don’t receive anywhere near that volume of phishing attempts. Obviously hacking isn’t just “breaching a systems firewall”. What does that even mean? Reverse shells are incredibly common to bypass inbound firewall rules. “decrypting passwords”, I assume you mean cracking the hash. Passwords are not stored encrypted.