A type of social engineering attack by malicious actors that attempts to acquire secret information such as login credentials (passwords and usernames), bank information, and other high-value data assets. Usually the perpetrator will ask potential victims to "confirm" their confidential information.

The attack is mainly carried out over email. Phishing attacks can take many forms, but many are through fake websites designed to resemble reputable and well-known institutions that you may be a customer of (i.e. a bank or credit card).