A spear-phishing attack is more personalized in nature compared to phishing in general. It is targeted at a certain person holding a key position in a company. In 2019, almost 90% (or precisely 88%) of organizations experienced spear-phishing attacks, according to ProofPoint’s State of the Fish report.