can someone explain me what sign message and verify message is used for?

What kind of phising attacks am i warned for? what should i never do to prevent that? (bitcoin-qt client)