Spear phishing is a personalized attack which targets a specific individual or organization. Attackers research about victims on social media and other web sites to craft a personalized message, often impersonating a trusted entity so that it looks trustworthy.Spear phishing is often the first step used to penetrate a company’s defenses and carry out a targeted attack.