While both are forms of social engineering, the difference comes down to targeting. Phishing is a dragnet; Spear Phishing is a sniper shot.
Phishing (Mass Attack)
- Targeting: None (Simultaneous blast to millions)
- Content: Generic ('Dear Customer')
- Goal: Low yield (0.1% click rate is fine)
- Detected By: Standard Spam Filters
Spear Phishing (Targeted)
- Targeting: Specific (researched via LinkedIn)
- Content: Personalized ('Hi Dave, saw you at the expo...')
- Goal: High Value (Credentials or Wire Transfer)
- Detected By: Not often. Bypasses filters.
Why Spear Phishing is Dangerous
The 'Trust' Phase
Spear phishing emails often contain no links initially. The attacker just wants a reply to build trust. Once trust is established, they send the payload. This behavior makes them invisible to most automated email gateways.
Key Takeaway
"Your best defense against spear phishing isn't a firewall—it's a skeptical culture. If a request feels unusual, verify it offline."
