CyberGuard dictionary / Phishing & Social Engineering
Spear Phishing
Phishing tailored to a particular person, role, or organization.
In simple terms
It is a scam message that uses details about you or your workplace to seem more believable.
Technical explanation
The attacker may reference a real project, colleague, or vendor to increase the chance of engagement.
Personalized details increase credibility but do not prove the sender controls the claimed account. Attackers can gather names, project details, and timing from public posts or previous messages.
Examples in practice
A message pretending to be from a known supplier asks accounts payable to change bank details.
The supplier email mentions a genuine purchase order and arrives near the usual billing date. The accounts payable clerk verifies the requested bank change with an established contact before paying.
Why it matters
Personal details in a message do not prove the sender is legitimate.
VERIFY & LEARN MORE
Sources and further reading
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.