Spear phishing is a targeted form of phishing attack where cybercriminals aim to steal sensitive information by masquerading as a trustworthy entity. Unlike general phishing, spear phishing is highly personalized and often targets specific individuals within an organization.