Spear phishing is a targeted attempt to steal sensitive information such as account credentials or financial information from a specific individual, often for malicious purposes, by masquerading as a trustworthy entity. Unlike general phishing attacks, which are sent to many potential victims, spear phishing attacks are personalized and targeted.