A phishing attack is a cyber scam where criminals impersonate trusted entities (like banks, companies, or social media) to trick victims into revealing sensitive information—such as passwords, credit card numbers, or personal details—via fake emails, messages, or websites.

Example: A fake "Account Suspension" email with a link to a fraudulent login page.