Phishing is a cybercrime where attackers pose as a trusted entity—like your bank, a major vendor, or even a colleague—to trick you into sharing sensitive information, clicking malicious links, or downloading harmful attachments.