🛡️ Free practice test question from: threat vectors (Security+)

Spear phishing is a highly targeted form of cyber attack where cybercriminals conduct detailed research on specific individuals or organizations to craft personalized and convincing email messages. Unlike broad phishing attacks that cast a wide net, spear phishing involves:

→ Extensive background research on the target

→ Tailoring the email to appear legitimate and relevant to the specific individual

→ Using personal details to increase the likelihood of the target engaging with the malicious email

→ Aiming to steal sensitive information or gain unauthorized access to systems

To differentiate from the other options:

→ Phishing is a broad, non-targeted email attack

→ Whaling is a specific type of spear phishing that targets high-profile individuals like executives

→ Pharming involves redirecting website traffic to fake sites through DNS hijacking