Phishing is when an attacker sends out a message or email asking the recipient to provide some type of secure information. It can often be used to deploy software that leads to an attack to hold the company hostage for ransom.
CISCO reports at least one person clicks on a phishing link in 86% of organizations.