Spear Phishing

What is Spear Phishing?

Term used to describe malicious individuals / group who scam users by using personal and other types of information to gain your trust.

Phishing attempt directed at individuals send malicious e-mail with the goal of:

1. Obtaining sensitive information, e.g. user name; passwords; credit card details, etc. 
2. Trick you to install malicious software

Highly personalised type of phishing message send to individual / groups use personal information to gain your trust such as:

1. Full name
2. Mailing address
3. Tax number
4. Phone number
5. Bank account number
6. Name of your employer, etc.

What can you do?

1. Never download attachments that are out of context- even if it is from someone you know
2. Use caution while surfing the web and checking your mail
3. Never download any attachments or click any links from unknown senders
4. Never enable macros on Microsoft office documents from unknown senders.
5. Enabling macros can allow malicious programs to install and infect your computer.
6. Always verify by reaching out to the sender on the phone to verify if it is legitimate.