Spearfphishing is a targeted form of phishing aimed at a specific person, team, or workflow. Instead of sending a generic lure to many people, the attacker tailors the message, file, or request so it looks relevant to the recipient’s job or platform activity. That makes the victim more likely to trust it and interact with it.
In cyber security, spearfphishing matters because it often bypasses simple suspicion. A message delivered through a familiar collaboration tool, contractor portal, or business inbox can look routine even when it carries a malicious attachment or link. Defenders look for unusual sender behavior, account abuse, and pressure to open files or enable content. User awareness, multi-factor authentication, attachment scanning, and platform monitoring all help reduce the risk.