How do phishing simulations differ from real attacks?

Simulations use safe templates (no malware, no data theft). If clicked, users see an educational landing page. Real attacks aim to steal credentials or install ransomware.