What is Phishing?

Phishing, as its name suggests, is literally information fishing. When we talk about a cyber attack of the phishing type, it is when a hacker creates a copy or clones a website to send it to their potential victims and try to “fish” or capture the data that their victims enter on the cloned site (the victims obviously thinking it is the real site and not the one the hacker created). For example, the idea is that the hacker’s victim receives an email from the hacker, where the hacker pretends to be a service like [www.facebook.com](http://www.facebook.com) and invites their victim to view a photo on Facebook or update their info or something that causes interest in the victim to click the button in the email to go to the website, which in reality will not take the victim to the official [www.facebook.com](http://www.facebook.com) website but to the website the hacker cloned or created. Since the hacker is phishing and using services like Ngrok or Setoolkit, everything the victim types on the fake site can be “fished” or “captured” by the hacker.