Phishing is a form of cyber-attack where attackers impersonate legitimate organisations or individuals to trick recipients into revealing sensitive information, such as login credentials, credit card numbers, or personal details. Phishing scams typically involve fraudulent emails, text messages, or websites designed to appear genuine, often prompting recipients to click on malicious links, download malicious attachments, or enter sensitive information into fake forms.