Attack types
스피어 피싱 (Spear phishing)
Definition
Targeted phishing tailored to a specific person or organization using researched details.
For executives (CEO·CISO)
A small set of high-privilege people (execs, finance, HR) are the targets, so org-average detection metrics hide the real risk. Attackers enrich context from public web/SNS data. Commonly missed: pair a dedicated protection policy for VIP/finance roles with minimizing exposed exec details (emails, titles).