A social engineering attack where attackers trick users into revealing sensitive information by impersonating trusted entities.