Spear phishing is targeted phishing: an attacker researches a specifically identified person or group, then uses that background information to make a deceptive request seem credible. The goal is often to gain trust and obtain confidential information such as login credentials. section 1.1
Unlike a generic phishing email, this fraud focuses on named people. Attackers commonly target people in company accounting departments, and similar deception can arrive through messaging apps or social media as well as email. section 1.1
Targeting an accounting employee
An attacker researches a named accounting employee and sends a tailored message that appears relevant to their work, attempting to persuade them to share credentials or other confidential information. section 1.1
