It's a man-in-the-middle attack where a site or app fraudulently pretends to be the site a user was intending to access. For example, a bad actor can embed a link that claims to be a PayPal login when it actually redirects you to a fake page that looks like PayPal in an attempt to collect information you input.