A cyber attack that attempts to steal sensitive information by masquerading as a trustworthy entity in electronic communications