A phishing attack happens when an email tailored to look like a message from a major bank is sent to millions of people