Phishing is a social engineering technique that is used to obtain sensitive and confidential information by masquerading as a communication from a trusted entity such as a well known institution, company or website. Usually, the malware is not in the communication itself but in the links within the communication.