Phishing attacks usually involve using email messages, pop ups, and websites that pretend to be from a legitimate bank, business, or well-known websites. People encounter these ‘lures’, and because they think they’re legitimate, they’ll share financial and personal information, login details, and contact information.