Phishing is a type of social engineering assault in which the attacker sends bogus emails or messages that look to be from a reputable source in order to fool the victim into disclosing sensitive information or clicking on a dangerous link.
Phishing, spear phishing, whaling, vishing, dumpster diving, and piggybacking are all examples of social engineering assaults aimed to trick people into disclosing personal information or acting in ways that benefit the attacker.
Spear phishing is a highly focused form of phishing in which the attacker conducts research on the victim and sends personalized communications that look to be from a trustworthy source, increasing the victim's likelihood of falling for the fraud.