A blog's title is following:
Pak-based cyber attacks use phishing to target Indian defence sites
IMO, if we remove 'use phishing' then 'attacks' is okay in this title because an attack cannot 'use' anything including phishing. In a way, 'attackers' looks more proper for this title.
Is my opinion right? I know the question is quite simple, but I am not sure about 'attacks' is written here in an idiomatic manner.