Phishing is a cyber attack where victims are tricked into clicking links to fake websites that steal their credentials. Option C is correct. Keylogger (A) records keystrokes, brute force (B) tries many passwords, and email spoofing (D) forges email sender info; none of these specifically describe directing users to fake websites.