What is the difference between phishing and pharming?

Phishing and pharming are both forms of online identity theft, but they differ in how they are executed. Phishing involves sending fraudulent emails or messages that appear to be from a legitimate source in order to trick the recipient into divulging sensitive information (such as passwords, credit card numbers, or social security numbers). In contrast, pharming redirects the user to a fake website that appears to be legitimate, usually by exploiting vulnerabilities in the user's computer or internet browser. The purpose of both tactics is to steal personal or financial data, but the means of obtaining it differs.