Phishing
Fraud where an attacker impersonates someone legitimate (your bank, your company, Microsoft) to extract passwords or money.
Most common via email: "Your account will be locked, sign in here". The link points to a fake clone of the real site. Type the password and it goes to the attacker.
Protection: 2FA (even with a stolen password the attacker can't get in), domain verification (SPF, DKIM, DMARC), and education. Phishing isn't a tech problem — it's a people problem.