What is Spear Phishing in Cybersecurity?

Spear phishing is the primary initial access technique for advanced persistent threats (APTs) and nation-state actors. Threat intelligence analysts track spear phishing campaigns attributed to specific threat groups. Penetration testers use spear phishing in red team engagements to test executive-level awareness.

Cybersecurity professionals who work with Spear Phishing include Penetration Tester, Threat Intelligence Analyst, Incident Responder. These roles apply Spear Phishing knowledge within the Offensive Security domain.