Spear phishing targets specific individuals or organizations.
Research Phase
- LinkedIn profiling
- Company website intel
- Social media monitoring
- Email format discovery
- Vendor relationshipsAttack Characteristics
- Personalized content
- Relevant context
- Trusted sender spoofing
- Timely themes
- Low volume, high impactDefense
- Executive protection programs
- Advanced email filtering
- Security awareness training
- Impersonation protection
- Out-of-band verification