Vishing is a type of social engineering attack where an attacker uses the telephone system, often pretending to be a trusted entity, to extract sensitive information from a target. Phishing is similar but primarily occurs through email or other electronic communication. Impersonation could be part of a vishing attack but is a broader term that doesn't specify the method of communication. Business email compromise is an attack targeted at companies to gain access to company information or assets, typically through deception via email.