A user receives an email formatted to appear as if the bank sent it. The email explains that the user must confirm the name, address, and social security number
listed on the bank account. Which of the following BEST describes the security threat taking place?

A.
Shoulder surfing

B.
Social engineering

C.
Spam

D.
Phishing