Which of the following security threats are MOST often delivered via email?

Which of the following security threats are MOST often delivered via email? (Select TWO).

A.
Rootkits

B.
Phishing

C.
Shoulder surfing

D.
Social engineering

E.
Spam