Phishing is a social engineering attack in which cybercriminals impersonate trusted entities via email to trick individuals into revealing sensitive information.