There are two tactics of phishing – sending emails to hundreds or thousands of users and waiting to see who responds, or a very targeted approach to a specific person, called spear phishing. A spear fishing attack built around a single person is much harder to spot.