Back to Glossary

Attack technique

Spear Phishing

A targeted form of Phishing tailored to a selected person, role or organisation using contextual information.

Related domain: CybersecurityConcept ID: concept-spear-phishing

Definition

Spear Phishing is a targeted form of Phishing in which an attacker prepares a message or interaction specifically for a selected person, role or organisation.

Human Explanation

The attack is not a generic mass message. It uses information about the intended victim to appear more credible and relevant.

Why it Matters

Targeted attacks can be harder to recognise because they imitate the victim's real relationships, responsibilities or current activities.

Conceptual Boundary

Spear Phishing differs from general Phishing through deliberate targeting and contextual personalisation, not through a particular communication channel.

Practical Perspective

The more reliable context an attacker obtains about a victim, the more convincing the request can become and the more important independent verification becomes.

Related Concepts