What is phishing?

• A. A mechanism to securely transmit emails
• B. A form of malware that encrypts files
• C. A fraudulent attempt to obtain sensitive information by masquerading as a trustworthy entity
• D. A legitimate process for verifying user identity

Answer: (C)

Phishing is a fraudulent attempt to obtain sensitive information by masquerading as a trustworthy entity. Attackers lure you with messages or fake websites that look like they come from legitimate organizations—such as banks, coworkers, or online services—so you reveal passwords, account numbers, or other private data. They often use urgency or fear to prompt action, and may include a link or attachment that leads to a fake login page or installs malware. This isn’t a method for securely transmitting emails, nor is it malware that encrypts files, nor a legitimate process for verifying your identity. To protect yourself, verify who sent a message through independent channels, be wary of requests for personal data, hover over links to check URLs, don’t enter credentials on pages you reached from a message, and use multi-factor authentication where possible.