Phishing

What Is Phishing?

Short definition:
Phishing is a cyberattack where criminals use fake emails or messages to trick people into sharing sensitive information or clicking malicious links.

What this actually means for a business:
Phishing attacks target employees, not systems. One convincing email can lead to stolen credentials, malware infections, or financial fraud.

Common misconception:
Many people believe phishing emails are easy to spot. Modern phishing attacks are highly convincing and often impersonate trusted vendors or coworkers.

When this matters:
If your employees use email — especially with access to financial systems or sensitive data — phishing is one of your biggest risks.

Related terms: Social Engineering, Multi-Factor Authentication