Phishing

Phishing is when an attacker sends a fake message, usually an email, that is designed to trick you into handing over a password, opening a harmful file or approving a payment. The message pretends to be from a company or person you trust, like your bank or your boss, and pushes you to act fast by clicking a link or opening an attachment before you stop to think.

It is the online version of a con artist phoning up and pretending to be your bank to get your details. A more targeted version that researches one specific person is called spear phishing, and the same trick sent by text message or phone call is known as smishing or vishing. It matters because a single careless click is one of the most common ways attackers get in.