Vishing is an attack performed by phone (voice) rather than by email. This involves impersonation, pretending to be a friend or colleague on a social networking site in order to obtain additional personal information, possibly in preparation for a spear phishing attack.