What does the term "phishing" refer to?

• A. A method to enhance network security
• B. A type of social engineering attack
• C. A network monitoring technique
• D. A process of data encryption

Answer: (B)

Phishing refers to a type of social engineering attack in which an attacker attempts to deceive individuals into providing sensitive information, such as usernames, passwords, or financial information. This is typically accomplished by masquerading as a trustworthy entity in electronic communications. For instance, attackers may send emails that appear to come from legitimate organizations, trying to lure recipients into clicking on malicious links or downloading harmful attachments.

This method exploits human psychology rather than technological vulnerabilities, making it crucial to educate users about recognizing such threats. Understanding that phishing relies on manipulation and deception helps individuals remain vigilant against these attacks, as they can often be quite convincing and appear legitimate.