Using technical means to redirect users into accessing a fake Web site masquerading as a legitimate one and divulging personal information.
Sources:
NIST SP 800-44 Version 2
An attack in which an attacker causes the subscriber to be redirected to a fraudulent website, typically a fraudulent verifier/RP in the context of authentication. This could cause the subscriber to reveal sensitive information (e.g., a password) to the attacker, download harmful software, or contribute to a fraudulent act. This may be accomplished by corrupting an infrastructure service (e.g., the DNS) or the subscriber’s endpoint.
Sources:
NIST SP 800-63-4
[