Phishing is a cyber attack that involves tricking individuals into divulging sensitive information such as usernames, passwords, and financial data. This is typically done through deceptive emails that appear to come from legitimate sources but are actually from cybercriminals.