Which type of social engineering attack involves targeting a specific individual or organization?

Spear phishing specifically targets a particular individual or organization, making it a more focused and personalized form of phishing. This attack often uses information specific to the target, such as job titles, interests, or personal relationships, to appear more credible and to increase the likelihood of the target falling for the deceit.

In contrast, phishing generally involves mass email campaigns that target a broad audience, hoping to trick a few victims among many. Vishing refers to voice phishing and typically involves phone calls to deceive individuals into providing sensitive information, while smishing involves similar tactics but uses SMS (text messages) instead of emails.

By concentrating on a specific target, spear phishing becomes significantly more dangerous, as attackers can use tailored messages to exploit the vulnerabilities of that particular individual or organization.