What about the phishing attacks that don't download executable software, like the ones that convince users to give up account information to a bogus web site? A

What about the phishing attacks that don't download executable software, like the ones that convince users to give up account information to a bogus web site? Are they not platform agnostic?