Phishing is a cyberattack executed using an email. In this, attackers pose as legitimate business contact or institutions and try to lure recipients into providing sensitive data including passwords, credit card information, bank account details, and other personally identifiable information that can be used to steal identities, data, and money.
Phishing simulation is a program which is used by an organization to gauge the awareness of its employee by sending realistic phishing email. Phishing simulation is used in coordination with training, educating employees about these attacks, how they work, and how to avoid them.