Phishing is a cyber attack where attackers trick users into revealing sensitive information through fake communications; it can be prevented by educating users and using email filtering tools.