Explanation
Phishing is the correct answer because it specifically refers to the use of deceptive emails to trick users into revealing sensitive information like usernames and passwords. Social engineering is a broader category that includes phishing, while cookie stealing and banner grabbing involve different methods of data theft.