Phishing attacks involve fraudulently obtaining sensitive information by posing as a trustworthy entity. Employee training and email filtering can help curb these attacks.