What is phishing?

• A. A scam used to steal sensitive data via fake online websites that look like real company's website.
• B. A method to securely verify user identity.
• C. A type of antivirus software.
• D. A legitimate marketing email.

Answer: (A)

Phishing is a deceptive tactic used to steal sensitive information by pretending to be a trustworthy entity online. In these scams, attackers try to lure you to a fake online site that looks like the real company’s website and prompt you to enter data such as passwords, account numbers, or Social Security details. The goal is to trick you into handing over information or installing malware. You might encounter it via an email, text, or message that looks urgent or official, with a link that leads to a nearly identical-looking site. A good defense is to verify the site yourself by typing the address into your browser instead of clicking the link, check the URL for slight misspellings or unusual domains, look for a secure connection (https and a lock icon), and consider enabling two-factor authentication. Phishing is not securely verifying identity, it’s not antivirus software, and it’s not a legitimate marketing email.