Threat actors employ phishing scams to trick individuals into giving away important details like login credentials or financial data.  It is a method of cheating human confidence due to social engineering, making it cheap and hence widely used as a case for unauthorized access and ID theft. Cybersecurity researchers at Lookout recently discovered that threat actors are actively using the new SSO-based phishing attack to trick users into sharing their login credentials.

Source: GBHackers