Commonly confused

Phishing vs Spear phishing

Phishing casts a wide net. Spear phishing targets a specific person or role with tailored bait.

Phishing

Phishing is a cyberattack where malicious actors impersonate trusted entities to deceive individuals into divulging sensitive information or performing harmful actions. These attacks typically leverage social engineering tactics, often through deceptive emails, text messages, or.

Phishing is a cyberattack using deception to steal sensitive info or trick users into harmful actions.

Full PathTerms™ definition

Spear phishing

Spear phishing is a highly targeted form of social engineering attack designed to deceive specific individuals or organizations into revealing sensitive information or performing malicious actions. Unlike broad phishing campaigns, spear phishing attacks are meticulously crafted,.

Spear phishing is a targeted cyberattack that impersonates trusted sources to deceive individuals into revealing sensitive information or taking malicio...

Full PathTerms™ definition

Why it matters

People mix up Phishing and Spear phishing in exam questions and job posts. Knowing the difference helps you pick the right control, process, or architecture choice.

How to remember the difference

Phishing casts a wide net. Spear phishing targets a specific person or role with tailored bait.

Related exam lists