Phishing attacks are a form of cyber-attack where attackers use deceptive emails, messages, or websites to trick individuals into providing sensitive information such as passwords, credit card numbers, or personal identification information. These attacks often masquerade as legitimate communications from trusted entities.