Phishing is a cybercrime where attackers impersonate legitimate organizations via email or fake websites to trick victims into revealing sensitive information like PINs, passwords, and credit card details. It is not a government plan or biological term. The term comes from 'fishing' where bait is used to catch victims - the 'ph' spelling is attributed to hacker culture.