Spear phishing is a type of phishing attack that is targeted at specific individuals or organizations. In a spear phishing attack, the attacker typically sends a personalized email or message that appears to come from a trusted source, such as a colleague, a supplier, or a customer. The message may contain a link or attachment that, when clicked or opened, installs malware on the recipient's device or directs the recipient to a fake website designed to steal login credentials or other sensitive information.