(Click on the image for a 2 minute video)
What is a phishing attack?Phishing is a form of social engineering. Phishing attacks use email or malicious websites to solicit personal information by posing as a trustworthy organization. For example, an attacker may send email seemingly from a reputable credit card company or financial institution that requests account information, often suggesting that there is a problem. When users respond with the requested information, attackers can use it to gain access to the accounts.
See also GRIZZLY STEPPE: Russian Malicious Cyber Activity.