What is a phishing attack?

• A. An attack that destroys a computer's hardware
• B. An attempt to obtain sensitive information by disguising as a trustworthy source
• C. A way to enhance the security of a network
• D. An exploitation of software vulnerabilities

Answer: (B)

A phishing attack specifically refers to an attempt by malicious actors to obtain sensitive information, such as usernames, passwords, or credit card details, by masquerading as a trustworthy entity in electronic communications. This often occurs through emails, messages, or websites that appear legitimate but are designed to trick individuals into providing confidential information.

Phishing relies on the psychological manipulation of users; attackers often create a sense of urgency, assurance, or curiosity to compel victims to act quickly without verifying the legitimacy of the source. This tactic makes it one of the most common and effective forms of cybercrime, as it preys on human behavior rather than exploiting technical vulnerabilities directly.

The other options describe different aspects of cyber threats or network security. Destruction of computer hardware pertains to physical damage or malicious attacks that sabotage hardware, enhancement of network security is focused on measures to protect against cyber threats, and exploitation of software vulnerabilities involves taking advantage of unpatched software weaknesses to gain unauthorized access. However, none of these options accurately defines phishing, making the second choice the most appropriate answer.