cyberattack designed to deceive people into revealing personal information