Phishing is a cyberattack designed to trick people into revealing sensitive information such as passwords, credit card numbers, or login credentials. Attackers often impersonate trusted organizations through fake emails, websites, or text messages. Employee awareness and proper security training are among the best defenses against phishing.