What Is a Spear Phishing Attempt?

Spear phishing is an email-based form of social engineering attack in which emails are sent to a specific individual or group of individuals in an effort to steal sensitive information or gain access to restricted systems. It is a targeted attack that is often more sophisticated than a generic phishing attack. The emails are crafted to appear as though they come from a legitimate source, such as a trusted colleague, a corporate executive, or a company vendor. The emails may contain malicious links or attachments that, if clicked, can install malware on the recipient’s computer or lead to a malicious website.