Phishing is a type of cyber-attack that relies on email. The attacker devises a message that convinces the recipient to download an attachment, click a link, go to a web page, or fill out a form. In an attempt to gain trust, the sender’s email address may indicate someone known to the recipient such as a colleague at work. Or the sender’s email address might indicate a government agency, or a reputable company the person has done business with.