Computer users unwittingly grant access to the botherder by clicking on an advertisement , opening an e-mail attachment or providing information to a " phishing " Web page , which is a phony site that mimics a legitimate site .