Which of the following steps is not ncluded in a phishing attack?

$1.$

Step $1$: Hacker sends phishing email to a target.

$2.$

Step $2$: Victim clicks on phishing link and visits fake website.

$3.$

Step $3$: Victim collects login credentials from hacker.

$4.$

Step $4$: Hacker uses victims credentials to access private information.