Spear phishing is a targeted attempt to steal sensitive information, such as account credentials or financial information, from a specific individual or organization. Unlike general phishing attacks that cast a wide net, spear phishing involves personalized messages that appear to come from a trusted source, making it more convincing. Attackers often gather information about their targets from social media or other online sources to craft their messages. This can include details like the target's name, job title, or interests, which increases the likelihood of the victim falling for the scam. Common tactics include fake emails or messages that seem to be from colleagues or reputable companies like PayPal or Bank of America.