Phishing attack targeting specific individuals is called what?

Phishing attack targeting specific individuals is called what?

• A. Tailgating
• B. Shoulder Surfing
• C. Whaling
• D. Spear fishing

Answer: (D)

Targeted phishing, known as spear phishing, is when an attacker customizes a message for a specific person using real details about them to seem legitimate. This personalization makes the lure much more convincing, increasing the chance that the recipient will click a link, open an attachment, or reveal credentials. Because it’s driven by information about a particular individual, it’s more sophisticated than broad, generic phishing. A related refinement is whaling, which targets high‑level executives with the same approach but aimed at leaders rather than just any individual. The other terms describe different security risks: tailgating is physically following someone into a secure area, and shoulder surfing is peeking at someone’s screen or keyboard to steal credentials. Recognizing spear phishing involves looking for messages that feel personalized, urgent, and that request action or sensitive information while pretending to come from a trusted source.

Targeted phishing, known as spear phishing, is when an attacker customizes a message for a specific person using real details about them to seem legitimate. This personalization makes the lure much more convincing, increasing the chance that the recipient will click a link, open an attachment, or reveal credentials. Because it’s driven by information about a particular individual, it’s more sophisticated than broad, generic phishing. A related refinement is whaling, which targets high‑level executives with the same approach but aimed at leaders rather than just any individual. The other terms describe different security risks: tailgating is physically following someone into a secure area, and shoulder surfing is peeking at someone’s screen or keyboard to steal credentials. Recognizing spear phishing involves looking for messages that feel personalized, urgent, and that request action or sensitive information while pretending to come from a trusted source.