Web Security and Cyber Attacks

The user receives an email from a malicious user on the behalf of his bank informing him that user has won a jackpot of $500,000.00 and that the user should verify and update the bank if the same amount has been credited to his account. When the user follows the link provided the email to log in, his credentials are compromised.