SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/secplus-spearphishing-targeted

What is phishing called when it targets a specific person, company or industry?

Spearphishing, a personalized attack on a chosen target.

Start playing free

  1. Spearphishing ✔
  2. Smishing
  3. Pharming

Why: Mass phishing casts a wide net. Spearphishing uses real names, roles and projects to look believable, so it is harder to spot.

Huh, didn't know that: MITRE ATT&CK says all forms of phishing are electronically delivered social engineering.

The dad joke
Spearphishing is when the email knows your name, your boss and your lunch order.
Like this card?
Play the game

References

Answer: Spearphishing. Mass phishing casts a wide net. Spearphishing uses real names, roles and projects to look believable, so it is harder to spot.

  1. MITRE ATT&CK T1566, Phishing attack.mitre.org/techniques/T1566
    In spearphishing, a specific individual, company, or industry will be targeted by the adversary.
    Checked 2026-10-10.
  2. MITRE ATT&CK T1566, Phishing attack.mitre.org/techniques/T1566
    All forms of phishing are electronically delivered social engineering.
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyTricking a person into revealing information or taking a harmful action is called what?Security & PrivacyPhishing carried out over a phone call is commonly called what?Security & PrivacyCompromising a website that a target group often visits, to infect them, is called what?

That's stuff everyone should know.