Spear phishing is a targeted form of phishing attack that involves personalized and tailored messages to specific individuals or groups. Attackers gather information to make the phishing attempts more convincing and increase the likelihood of success.