A type of cyber attack that involves sending fraudulent communications that appear to come from a reputable source, usually through email. The goal is to steal sensitive data like credit card and login information, or to install malware on the victim’s machine.