Phishing is the process in which an attacker tries to obtain sensitive information via a fake email or some other form of communication designed to look like a legitimate email from a trusted source.
Phishing is often done via email, but can also be done over the phone, on social media, or via text messages. We are focusing on the email method. Phishing can be done on a large scale, where a generic email is sent out to a large number of recipients hoping someone will take the bait. The Nigerian prince email scam was a popular phishing campaign. Other emails offering incentives are popular and work relatively well, such as offering an iPhone giveaway or a gift card if they participate and follow the link you provided and logging in with their credentials. Phishing emails also often mimic legitimate senders using real signatures and company logos...
