A phishing attack involves fraudulent attempts to obtain sensitive information such as passwords or credit card details by masquerading as a trustworthy entity in electronic communication. These deceptive tactics typically occur via email, text messages, or fake websites, exploiting human psychology to manipulate victims into divulging confidential data.