email threat

In no less than 250 words, describe a type of email threat and how a hacker can use it to get sensitive information.  How can a network administrator prevent this type of attach from happening?