Definition
Attacks that exploit trust, impersonation or persuasion to induce unsafe actions or disclosure.
Usage and distinctions
These attacks target human decisions rather than software flaws. Phishing may impersonate a login page, recruiter or trusted organization.