An attack that creates a website that looks like another website, with the purpose of learning someone's account information is called which of the following?

A virus is self-replicating malicious code that attaches to files and spreads, not a social engineering technique involving fake websites.

Shoulder surfing is a physical attack where an attacker observes a victim's screen or keyboard directly, not a website-based deception.

A Trojan is malware disguised as legitimate software to gain access to a system, not a fake website used to harvest credentials.

Phishing is the attack technique where a malicious actor creates a fraudulent website that mimics a trusted site to trick users into entering their login credentials or personal information. The goal is credential harvesting or identity theft, which directly matches the described scenario of a fake website designed to capture account details.