SPEAR-PHISHING AND ITS SPECIFICS WITHIN SOCIAL ENGINEERING

Abstract

In recent years, we have observed an increasing emphasis on the digitisation of the environment, which leads to the fact that we also hear more and more loudly about the phishing issue, not only from security specialists and professional groups. Phishing is a social engineering attack consisting of deception and abuse of the human factor to break security and obtain sensitive information. The article's introduction provides a general view of social engineering and describes its principles, specifics, and forms of social engineering. It mainly emphasises the issue of spear-phishing. The article's primary goal is to solve a practical security problem and emphasises spear-phishing and the importance of digital security and the most vulnerable element - the user. The article is an introductory look at the issue of cyber security in the context of social engineering aimed at spear-phishing and the mapping of concrete measures against this threat.