The anatomy of a spear phishing attack

A spear phishing attack is a malicious email (usually) with content aimed to exploit the specific recipient.

Yee Ching Tok, over on SANS Internet Storm has an excellent article taking apart a spear phishing email targeting YouTube content creators.

Analyzing a YouTube Sponsorship Phishing Mail and Malware Targeting Content Creators – SANS Internet Storm Centre

It does contain one of the social engineering hooks – a to good to be true offer. These are often harder to ignore or dismiss as you are left wondering what you may have missed out on. Threats in emails makes them easier to get rid of.

I really like this type of SANS article. It is a great training aid.

Further Reading

Cyber Security Awareness Training