An employee clicked a link in an email from a payment website that asked the employee to update contact information. The employee entered the log-in information but received a “page not found” error message. Which of the following types of social engineering attacks occurred?

Phishing is a social engineering attack where an attacker attempts to trick a victim into revealing sensitive information, such as login credentials, by masquerading as a trustworthy entity in an electronic communication. In this scenario, the email from a "payment website" asking for updated contact information, combined with the request for login details and the subsequent error message, is a classic phishing attempt designed to steal credentials. Brand impersonation is a broader category that phishing falls under, but phishing specifically refers to the use of electronic communication to trick victims. Pretexting involves creating a fabricated scenario (a "pretext") to gain trust and extract information, which is not the primary method here. Typosquatting involves registering domain names similar to legitimate ones to trick users who mistype a URL; this scenario involves an email link, not a mistyped URL.