An email pretending to come from a bank asks a user for login details. That attack is:

1. The attacker impersonates a trusted entity in a message. 2. The goal is to have the victim hand over credentials. 3. That is phishing. _Source: OpenStax Foundations of Information Systems, Chapter 5, Information Systems Security Risk Management._