Delivery technique · MITRE ATT&CK T1566

Spear phishing

Phishing written for one person or team, using details from social media, breaches, or earlier emails.

How it works

1. Attackers research the target's role, colleagues, and suppliers.
2. The message references real projects or people.
3. The request feels routine, so it skips normal suspicion.

Defenses

• Verify unusual requests on a known channel.
• Limit public detail about finance and IT staff roles.
• Train staff with realistic, role-specific examples.

Reference: MITRE ATT&CK T1566 Phishing

Scams that use it

• Fake job interview malware scam
• CEO fraud (executive impersonation)
• Vendor invoice and payment redirection
• Real estate closing wire fraud
• Executive gift card request scam
• Deepfake CFO video call fraud
• Developer-targeted lures (fake job tests and malicious packages)