thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Foundational

Spear Phishing

A targeted phishing attack crafted for a specific individual or group using personal or organizational details.

Definition

Spear phishing uses reconnaissance from social media, company websites and prior breaches to make messages highly convincing. It is often the initial access method for APT intrusions. Because messages are tailored, they evade generic filters more easily.

Example

An email to a finance analyst referencing a real vendor and current project with a malicious invoice attached.

Exam tip

"Targeted at a specific person or department" = spear phishing; "targeted at executives" = whaling.

Don't confuse it with

Related terms