A phishing attack is when an attacker tricks a person into revealing private or sensitive information through a fraudulent message, often through email or text. This can include bank details, personal identification, login credentials etc. The malicious link can also install malware, which can lead to digital devices being hacked, viruses being leaked onto one or more devices within the organisation or track your activity on your device.