Security Term

Spear Phishing

A targeted form of phishing that uses personalized information about a specific individual or organization to craft more convincing deceptive messages.

What is Spear Phishing?

Unlike generic phishing, spear phishing messages reference the target's name, job role, colleagues, or recent activities, making them much harder to recognize as fraudulent. They commonly target executives (whaling) or employees with privileged access. Attackers often harvest data from LinkedIn and social media to craft these attacks.

Understanding this concept is crucial for maintaining a robust security posture. In the context of modern cyber threats, spear phishing represents a significant area of focus for security professionals and organizations alike.