Answer:
1) What is it?
It's "the fraudulent practice of sending emails purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers."
"an email that is likely a phishing scam"
2) How can it happen?
It occurs when an attacker, masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message.
3) What are some ways they can 'catch' you?
Examples of requested actions in a phishing email include:
Clicking an attachment.
Enabling macros in Word document.
Updating a password.
Responding to a social media connection request.
Using a new wi-fi hot spot.
Step-by-step explanation:
I hope this helps!