A phishing attack is a type of cyber attack in which a malicious actor impersonates a trusted entity in order to trick victims into providing sensitive information or taking a desired action. Phishing attacks are typically carried out via email or instant message, and often involve lure content that directs the victim to a spoofed website that resembles a legitimate website that the victim is familiar with. The goal of a phishing attack is to gain access to sensitive information such as login credentials, financial information, or personal information.