Joanne receives an email that appears to be from the bank she uses. The email states that fraudulent activity has been detected on her account and contains a link so she can log in to verify that she made a recent transaction. When she clicks the link, the page asks for her username, password, Social Security number, and credit card number to verify the account.

Which of the following types of attacks might this be$?$