E-mails or other communications that are
designed to trick a user into believing that he or she should provide a
password, account number or other information. The user then typically provides that information to a website
controlled by the attacker. “Spear
phishing” is a phishing attack that is tailored to the individual user, such as
when an e-mail appears to be from the user’s boss, instructing the user to
provide information.