An online phishing attack typically involves a scammer attempting to impersonate a service you use in a bid to get credentials or money out of you. Another more targeted and potentially more lucrative version of this scam is called whaling or whale phishing.