Go back

Glossary

What is Phishing?

Phishing

Phishing is a type of fraud in which an attacker pretends to be a known or trustworthy sender. The goal may be to get the recipient to disclose login information, open malicious content, or authorize a payment. These attempts often come via email.

Also known as: Online Fishing

An attempt to abuse trust

The attack may use well-known names, logos, and a sense of urgency to make the message seem convincing. Professional language is not in itself a sign that the message is genuine. Phishing describes the method, while phishing simulation is a controlled exercise in which similar situations are used for training. The key point is that the recipient acts on false pretenses.

Example: Phishing

An employee receives an unexpected email stating that their company account must be verified immediately. The message displays a familiar logo and a link to the login page. The employee contacts IT through the usual channel. It turns out that the message did not come from the company’s system provider.

👉 Explore phishing simulations with XtraMile