Phishing is a type of cyber attack in which criminals attempt to deceive individuals into revealing sensitive information, such as usernames, passwords, credit card numbers, or other personal data. The term "phishing" is derived from the word “fishing,” as attackers metaphorically “fish” for confidential information by luring victims with seemingly legitimate communications. These attacks are usually carried out through emails, text messages, phone calls, or fake websites that imitate trustworthy entities. The goal of phishing is to exploit human trust and manipulate users into voluntarily disclosing confidential information, which can then be used for identity theft, financial fraud, or unauthorized access to accounts. Phishing can take many forms, including spear phishing, where attackers target specific individuals or organizations with highly personalized messages, and whaling, which targets high-profile individuals like executives or VIP customers. In phishing attacks, the communication is designed to appear authentic, often including logos, branding, and professional language that mimic real institutions. Attackers create a sense of urgency, fear, or curiosity to prompt immediate action from the recipient. For example, a phishing email might claim that a user’s bank account has been compromised and ask them to click on a link to verify their details. Once the victim clicks the link,