Phishing is a form of social engineering cyberattack where cybercriminals pretend to be a genuine company or person through a deceptive email, aiming to steal sensitive information or infect the user's device with malware.