Spear phishing is a type of phishing that targets a specific person or group and will include information known to be of interest. For example, a company's employees can be targeted with an email that appears as if it's coming from the technology department and includes instructions or links to update software. When clicked, the users actually download ransomware onto their company computers.