Phishing is a form of cyber-attack intended to steal victims' login or payment credentials using fake emails and websites that look official, or by pretending to be a representative from a legitimate organization.