What is Spear Phishing?
While phishing is effective, a new type of attack has developed called spear phishing. Unlike traditional phishing emails, spear phishing messages are highly targeted. Instead of the emails going to a large number of users, spear phishing targets a specific set of individuals, such as those who work for a particular organization or have a common interest. Often the goal of spear phishing is to gain confidential information or, in a corporate environment, trade secrets. Attackers often use social media sites such as Linkedin, Twitter and Facebook as well as an organization’s website to target individuals.
- Limit the amount of personal information that you post about yourself in social media sites and mail forums.
- Be suspicious of any emails that ask you to click on a link for further information.
- If the email is from a known source and you are suspicious of the content, contact the individual to verify that they did in fact send the email.
- Never provide personal information in response to an email.