Spear phishing

In March 2011 two small groups of RSA employees received an email titled "2011 Recruitment plan" with a booby-trapped Excel spreadsheet. One opened it, and that was enough to open the way to the theft of SecurID data. Spear phishing is a sophisticated variant of classic phishing. Where mass phishing sends the same fraudulent message to a very large number of recipients in the hope that a few will bite, spear phishing addresses a specific person or organization, after reconnaissance work that allows the message to be personalized, citing real names, ongoing projects or professional relationships, in order to make it credible. Its variant aimed specifically at executives is sometimes called whaling. This personalization makes it a formidably effective weapon, and spear phishing ranks year after year among attackers' leading vectors of initial access, whether used to steal credentials, install malware or initiate a transfer fraud. For insurance, it sits at the crossroads of several covers, because it can lead just as easily to ransomware as to financial fraud. The best defenses combine continuous staff awareness, since employees remain the targeted link, multi-factor authentication, which limits the exploitation of stolen credentials, and technical filtering of messages.