A phishing attack is a form of cybercrime where the attacker poses as a trusted entity to trick victims into revealing sensitive information, such as usernames, passwords, credit card details, and more.