Phishing is a type of cybercrime where attackers impersonate legitimate entities to steal sensitive information such as usernames, passwords, and credit card details. This deceptive practice is typically carried out using email, instant messaging, or fraudulent websites.