Phishing
nounid
3580·updated May 9, 2026candidate
A digital form of social engineering that uses authentic-looking—but bogus—emails to request information from users or direct them to a fake Web site that requests information.
polysemous
Classifications
Entity Type
Threat90%rule-basedr:entity.threat.attack.v1
Sensitivity
unclassified
Information Class
unclassified
Variants
- plural
- Phishings
- possessive
- Phishing's
- pluralpossessive
- Phishings'
Framework definitions
- §1
- The use of e-mails that appear to originate from a trusted source to trick a user into entering valid credentials at a fake website. Typically the e-mail and the web site looks like they are part of a bank the user is doing business with.
National Initiative for Cybersecurity Careers and Studies (NICCS) Cybersecurity Lexicon1 senseview framework →
- §1
- A digital form of social engineering to deceive individuals into providing sensitive information.
- §1
- This is a type of electronic mail (e-mail) attack that attempts to convince a user that the originator is genuine, but with the intention of obtaining information for use in social engineering Scope Note: Phishing attacks may take the form of masquerading as a lottery organization advising the recipient or the user's bank of a large win; in either case, the intent is to obtain account and personal identification number (PIN) details. Alternative attacks may seek to obtain apparently innocuous business information, which may be used in another form of active attack.
Federal Financial Institutions Examination Council (FFIEC) IT Examination Handbook Infobase, Glossary1 senseview framework →
- §1
- A digital form of social engineering that uses authentic-looking—but bogus—e-mail to request information from users or direct them to fake websites that request information.
- §1
- Deceiving individuals into disclosing sensitive personal information through deceptive computer-based means.
- §2 · sense_2_pending_review
- A digital form of social engineering that uses authentic-looking—but bogus—emails to request information from users or direct them to a fake Web site that requests information.
- §1
- Deceiving individuals into disclosing sensitive personal information through deceptive computer-based means.
- §1
- A digital form of social engineering that uses authentic-looking—but bogus—emails to request information from users or direct them to a fake Web site that requests information.
- §1
- Tricking individuals into disclosing sensitive personal information through deceptive computer-based means.
Outgoing relationships
No outgoing triples
This term is not the subject of any RDF-style relationship yet.
Incoming relationships
No incoming triples
No other term currently asserts a relationship to this one.