SecurCheckCyber Center
Need help
Back to analysis tools
All cyber threats
Human manipulation

Spear phishing

Targeted phishing

A phishing message tailored using real information about a person or organisation.

Fiche de sensibilisationPrête à diffuser à vos équipes ou clients

MIGHT YOU BE AFFECTED?

Turn knowledge into action.

How does this work?

The message mentions a real project, client or manager to appear more credible.

REAL-WORLD EXAMPLE

« A fake supplier sends an invoice for a current project to the right person in the accounting team. »

Typical sequence

  1. 1Research the target
  2. 2Personalise the message
  3. 3Adapt the trap to the victim's role

Warning signs

  • Accurate context but an unusual request
  • An unexpected attachment
  • A sudden change of contact or bank details

How to protect yourself

  • Confirm sensitive requests
  • Limit publicly available information
  • Verify changes to bank details

If you think you are affected

Stop the affected activity, isolate exposed devices or accounts, preserve evidence, revoke suspicious access and contact the appropriate security professional.

Get help

Last updated: 6 September 2026