spearphishing
Tailored cybercrime bait
Spearphishing is a targeted form of phishing—a fraudulent attempt to obtain sensitive information by impersonating a trustworthy source.
Unlike mass phishing campaigns, spearphishing attacks are customized for specific individuals or organizations, using personal details to appear legitimate: The hackers used spearphishing emails that referenced the executive's recent conference appearance.
Also spelled spear-phishing or spear phishing.
Deceptive identity manipulation
- social engineeringManipulating people for information
- impersonationPretending to be another
- spoofingFraudulent imitation
- personalizationTailoring to individual needs
reconnaissance · whaling · malicious link · context-aware · individualized · rapport building
Deliberate act of deception
- guileSly, strategic dishonesty
- manipulationUnderhanded control of others
- subterfugeDeliberate deception to conceal
- trickeryDeliberate deception or fraud
pretense · masquerade · fraudulence · impersonation · hoax · ploy · con · swindle
Harmful computer programs
- ransomwareHostage-taking code
- keyloggerSoftware recording typed input
- exploitNotable act or abuse
- zero-dayUnpatched security vulnerability
APT · breach · compromise · intrusion · credential theft · backdoor · rootkit · botnet
Senior organizational leader
- employeeHired organizational member
- finance departmentUnit managing organizational funds
- organizationStructured group with purpose
- corporationLegally separate business entity
government agency · contractor · supplier · C-suite · account holder · insider · vendor · partner
pretexting
Deceptive identity manipulation
- social engineeringManipulating people for information
- impersonationPretending to be another
- spoofingFraudulent imitation
personalization · reconnaissance · whaling · malicious link · context-aware · individualized · rapport building
ruse
Deliberate act of deception
- guileSly, strategic dishonesty
- manipulationUnderhanded control of others
- subterfugeDeliberate deception to conceal
trickery · pretense · masquerade · fraudulence · impersonation · hoax · ploy · con · swindle · dupery
malware
Harmful computer programs
- ransomwareHostage-taking code
- keyloggerSoftware recording typed input
- exploitNotable act or abuse
zero-day · APT · breach · compromise · intrusion · credential theft · backdoor · rootkit · botnet · cybercrime
executive
Senior organizational leader
- employeeHired organizational member
- finance departmentUnit managing organizational funds
- organizationStructured group with purpose
corporation · government agency · contractor · supplier · C-suite · account holder · insider · vendor · partner · stakeholder