Legal Definitions - Spear phishing

Definition: Spear phishing is a type of cyber attack where a hacker sends a fake email to a specific person or group, pretending to be someone they know or trust. The email is designed to trick the recipient into giving away sensitive information, such as passwords or credit card numbers.

For example, a hacker might send an email to an employee at a company, pretending to be the CEO. The email might ask the employee to click on a link and enter their login credentials, giving the hacker access to the company's network.

Another example is a hacker sending an email to a bank customer, pretending to be the bank. The email might ask the customer to update their account information by clicking on a link and entering their personal details, allowing the hacker to steal their identity.

These examples illustrate how spear phishing works by targeting specific individuals or groups with personalized messages that appear legitimate. The goal is to trick the recipient into taking an action that gives the hacker access to sensitive information.