Phishing Email has been one of the favorite attack of hackers, and it's that way because it's really easy to attack tons of users at the same time. And that kind of attack are about probability... i mean the 0.01% will hit the bait, so, if the attacker sends a mail to 10000 users at least 1 will get scammed, so, what happens if the attack goes to 1M users. So, be careful with mail and never open a link from there.
Phishing emails lead to phishing sites, fake applications and scam requirements on private keys, mnemonic seeds to get supports or scam giveaway (send first and get more fund back).
I have a question on phishing sites. What will happen if I visit a phishing site and log in my account on phishing site. I know they steal my password, account details but if I have 2FA for my account, will they be able to steal my fund? I think they can not because they won't be able to steal my 2FA that is on my phone.