What is the definition of phishing?

Phishing is a cybercrime in which a target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data.

What Is Phishing? Definition, Examples & Prevention

Phishing is a type of deception designed to trick you. It is not about "hacking" a computer's code; it is about "hacking" the person using it.

91%

Phishing Attacks

% of cyber attacks that start with phishing

How Phishing Works

Attackers cast a wide net (hence "fishing") by sending thousands of fraudulent emails. These emails typically mimic trusted entities to gain your trust immediately.

1 The Lure

Attacker sends an email mimicking a bank, boss, or service (e.g., 'Reset Password').

2The Hook

The email creates urgency (Fear: 'Account Locked' or Greed: 'You won!').

3The Catch

Victim clicks a link to a fake login page and enters credentials.

4The Breach

Attacker uses credentials to access the real network.

Common Disguises

Fake Bank Alerts ('Your account is frozen')

HR Confirmations ('Review changes to benefits')

Cloud Services ('Microsoft 365 Password Expired')

Shipping Notifications ('Delivery Failed')

The Goal

The attacker wants one of two things:

Credentials: Usernames and passwords for access.

Malware: Installing ransomware to encrypt your data.

Evolution of Phishing

In the past, phishing emails were full of typos and obviously fake. Today, attackers use AI tools to write perfect English and copy legitimate logos exactly.

Key Takeaway

"Defense requires a combination of technical filters (to block the obvious spam) and human awareness (to spot the sophisticated lies)."