Skip to content
atlas

Don't confuse these

Pretexting vs Spear phishing

Why they differ

Both aim at one chosen person, but spear phishing rests on a single well-made message, while pretexting rests on playing a role that can last over many contacts.

Pretexting

People, culture & awareness

Inventing a believable cover story and role, such as a new colleague or an auditor, to get someone to share information.

Formal

A form of social engineering built around a made-up situation and identity, usually prepared with research about the target; the story gives the victim a reason to help, so the request feels normal rather than suspicious.

In plain English

Like an actor who turns up in a delivery uniform with a clipboard - nobody asks questions, because the costume and the story fit.

In practice

Someone calls the payroll office of a municipality, says she is from the auditors, names the finance manager and asks for a list of staff salaries “for this year's audit”.

Why it matters

A good story beats most of the warning signs people are taught to look for, so staff need clear permission to check who is asking before they help.

Spear phishing

People, culture & awareness

A phishing message tailored to one person or team, made to look like it comes from someone they know.

Formal

Phishing aimed at a chosen person or small group, where the attacker first gathers details about the target - names, roles, current projects - to make the message look like it comes from a known contact.

In plain English

Like a fisher who ignores the shoal and aims a spear at one particular fish, after watching where it likes to swim.

In practice

The IT administrator at a regional hospital gets a mail that names a real system upgrade and the supplier's project manager, with a link to “the updated plan” that leads to a fake login page.

Why it matters

Because it uses real names and real context, the usual warning signs are missing, so even careful staff can be fooled - and the targets are often the people with the most access.

Shared connections

Atlas is in beta.