what is it called when websites that look like legitimate sites are used to collect private information for malicious purposes?

Question

I say phishing

Answer 1

correct.