A social engineering attack that uses deceptive emails, messages, or websites to trick individuals into revealing sensitive information such as passwords, financial data, or personal details.