Answer: A
Correct answer: An attempt to obtain sensitive information by impersonating a trusted party
Phishing is a fraud in which the attacker impersonates a bank, employer or service to induce the victim to reveal passwords, card numbers or other sensitive information - usually through an email or message linking to a convincing fake site. It is an attack on the person rather than on the system, which is why technical defences alone are insufficient and why it remains the commonest route into an organisation. The variants are worth naming. Spear phishing is targeted at a specific individual using details gathered about them. Whaling targets senior executives. Vishing uses voice calls and smishing uses text messages. The practical defences are checking the sender’s actual address rather than the display name, hovering over a link to read its real destination, never following a link to log in, and above all enabling two-factor authentication, which makes a stolen password insufficient on its own.