Attacks and malware
What is Spear phishing?
Phishing aimed at a specific person or small group, written using research about them so it is far more convincing than mass phishing.
Spear phishing is phishing aimed at a specific person, role or small group. The attacker researches the target first, using LinkedIn, company websites, conference talks or earlier breaches, and writes a message that fits their real work.
It is a favourite initial access method of espionage groups. Because the content is tailored, generic filters catch less of it, and user reporting becomes an important detection source.