Phishing is a type of social engineering attack where cybercriminals impersonate legitimate entities to trick individuals into revealing sensitive information, such as usernames, passwords, and financial data.