phishing

{
  "id": "MLC-T-CYB-003120",
  "term": "phishing",
  "field": "Cybersecurity",
  "definition": "1. A technique for attempting to acquire sensitive data, such as bank account numbers, through a fraudulent solicitation in email or on a web site, in which the perpetrator masquerades as a legitimate business or reputable person.\n\n2. Tricking individuals into disclosing sensitive personal information through deceptive computer-based means.\n\n3. A digital form of social engineering that uses authentic-looking - but bogus - e-mails to request information from users or direct them to a fake Web site that requests information.\n\n4. Using social engineering techniques to trick users into accessing a fake Web site and divulging personal information.\n\n5. An attack in which the Subscriber is lured (usually through an email) to interact with a counterfeit Verifier/RP and tricked into revealing information that can be used to masquerade as that Subscriber to the real Verifier/RP.\n\n6. An attack in which the subscriber is lured (usually through an email) to interact with a counterfeit verifier or relying party and tricked into revealing information that can be used to masquerade as that subscriber to the real verifier or relying party.\n\n7. Tricking individuals into disclosing sensitive personal information by claiming to be a trustworthy entity in an electronic communication (e.g., internet web sites).\n\n8. An attack in which the subscriber is lured (usually through an email) to interact with a counterfeit verifier/RP and tricked into revealing information that can be used to masquerade as that subscriber to the real verifier/RP.",
  "synonyms": [
    "Verifier Impersonation"
  ],
  "references": [
    "NIST SP 800-12 Rev. 1 from IETF RFC 4949 Ver 2",
    "NIST SP 800-150; NIST SP 800-45 Version 2; NIST SP 800-83 Rev. 1",
    "NIST SP 800-115",
    "NIST SP 800-44 Version 2",
    "NIST SP 1800-21B",
    "NIST SP 1800-17b",
    "NIST SP 800-82r3",
    "NIST SP 800-63-4",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/phishing/"
}