Phishing is a type of cyber attack where attackers impersonate legitimate organizations or individuals to trick victims into providing sensitive information, such as passwords, credit card numbers, and personal details. This information is then used for malicious purposes, including identity theft and financial fraud.