Phishing

Phishing is a deceptive attempt to obtain sensitive information or persuade someone to take an unsafe action by posing as a trustworthy sender or service. A small business owner might receive a fake domain-renewal warning or a message that imitates a website hosting provider. Links may lead to fraudulent sign-in pages, while attachments or instructions can create other risks. Staff should verify unexpected requests through trusted channels instead of relying on the message's branding or urgency. Password managers, multifactor authentication, and access reviews can reduce exposure, but no single control prevents every attempt. Phishing is a social-engineering threat, not simply a website software bug.