Spear Phishing
Noun · Security & Infosec · Origin: 2005
Definitions
A highly targeted phishing attack directed at a specific individual or organization, using personalized information to increase credibility and success rate.
In plain English: A fake email carefully crafted for one specific person using details about their life or job, making it much harder to spot as fake than mass spam.
Etymology
- c. 2005
- Security researchers coin 'spear phishing' to distinguish targeted email attacks from mass phishing campaigns
- 2011
- RSA SecurID breach begins with a spear-phishing email containing an Excel file titled 'Recruitment Plan'
- 2016
- John Podesta's email compromise via spear phishing influences the U.S. presidential election, making the term front-page news