Attack where a malicious actor gains control of a user’s account, typically through credential theft or social engineering.
