Phishing Attack

—An attempt to acquire sensitive information like usernames, passwords, and credit card details for malicious purposes by masquerading as a trustworthy entity in a digital environment.


Phishing is a type of social engineering that attempts to trick someone into clicking a link and/or entering data into a controlled source from a malicious person or group. Phishing has become more of an individually customized targeted attack rather than a broad or group attack. An individual can receive a specific targeted email (or other source) that is intended for that person or position.  The Phishing attack is a delivery vector or mechanism that would then deliver a payload or retrieve information from the user that can be used then or at a later time and even combined with other attacks. Phishing has become sophisticated. See an example below: