An IT security team member observes an unusual amount of traffic within the network destined to an external website. The website seems to be a fake bank site with a phone number. The IT security team calls the number from the website and was greeted with a recording that asks for sensitive information. After further investigation, the security team notices that a fake link was sent to several users. What type of attack is occurring