A form of cyberattack where attackers impersonate trusted entities, often via email, to trick individuals into revealing sensitive information, such as passwords or credit card numbers. It is a common method used to launch more sophisticated attacks like identity theft or ransomware.