Targeted phishing attack aimed at specific individuals using personalised information to increase credibility.
Spear phishing is a targeted form of phishing where attackers research specific individuals and craft personalised emails to increase success rates. Unlike mass phishing campaigns, spear phishing might reference the victim's actual job title, recent projects, colleagues' names, or company events gathered from LinkedIn, company websites, or previous breaches. This personalisation makes the email far more convincing. Spear phishing often targets employees with access to sensitive systems or financial authority, making it a precursor to BEC fraud and data breaches.
Why It Matters
The DSC Perspective:
Spear phishing is harder to detect because it looks legitimate and personal. High-value targets—finance teams, executives, IT administrators—face elevated risk. Awareness training should include examples of targeted attacks, not just obvious spam.