spear phishing

Spear phishing is a targeted cyberattack where hackers attempt to trick a specific individual into revealing personal or confidential information. Unlike general phishing, which casts a wide net, spear phishing focuses on a particular person or group, often using personalized emails that may incorporate details from their online presence, such as social media profiles.1

This method involves sending emails that appear to be from a trusted source, like a bank or employer, to persuade the recipient to click on links or provide sensitive data. This information can then be used for illicit purposes, including identity theft. Spear phishing is a significant threat in information technology, as it can be used to introduce malicious programs into an organization's computer systems.2