Spear phishing attacks occur when an email arrives, apparently from a trustworthy source, but instead it leads the unknowing recipient to a bogus website full of malware.
These emails often use clever tactics to get victims’ attention. For example, some companies have been targeted by emails suggesting that there is an outstanding invoice to be paid and the bank account details the money should be sent to.
To fight spear phishing scams, employees need to be aware of the possibility of bogus emails landing in their inbox and anti-spoofing controls should be implemented.
However, it is not just businesses at risk, this news item from the BBC shows that anyone could be targeted http://www.bbc.co.uk/news/business-41897888