Phishing is best defined as?

• A. Targeted emails attempting to get the user to click a link or download a program
• B. Physical theft of devices
• C. Random software update notifications
• D. An internal audit process

Answer: (A)

Phishing is a social engineering attack where attackers send deceptive messages that appear to come from a trusted source to trick you into taking an action. The description of targeted emails aiming to get you to click a link or download a program best captures its goal: to cause you to disclose credentials or install malware, compromising security. This kind of lure relies on convincing you to act quickly or without verifying the sender. The other options describe physical theft, generic or benign notifications, or internal processes, none of which involve the deceptive, action-forcing tactic that defines phishing.