Type of cyberattack that attempts to deceive users into revealing sensitive personal information, such as passwords and credit card details, through emails or other means that appear to come from trustworthy sources. It is crucial for companies to protect their customers from such threats.