Definitions of phishing

an email in which the sender falsely claims to be a legitimate business (eg a bank) and tries to trick the recipient into revealing private information (eg passwords, user names, credit card numbers, bank account numbers etc)

The hackers used a common phishing scam to get hold of users' passwords.