EC-Council Certified Incident Handler (ECIH) Practice Test

The definition of phishing is best encapsulated by the statement that describes it as a psychological manipulation technique to acquire user information. Phishing is fundamentally about deception; attackers craft messages designed to trick recipients into divulging sensitive information, such as usernames, passwords, or credit card details. This manipulation often involves creating a sense of urgency or fear, making the victim feel compelled to act quickly, such as by clicking a malicious link or providing personal data.

While other options touch on aspects of phishing, they do not capture its essence. For example, unsolicited emails that distribute malicious links, while related to phishing, do not address the psychological tactics used to deceive users. Similarly, the mention of junk mail conveys a sense of unwanted communication but does not reflect the targeting and fraudulent intent behind phishing schemes. Lastly, sending repeated emails to an address refers more to harassment or spam and lacks the crucial element of psychological manipulation integral to the phishing process.