Because it uses your personal information to gain your trust, spear phishing is more dangerous than mass phishing. Cybercriminals primarily use this technique to gather information about your organization in order to exploit security flaws and cause maximum disruption.
The most serious threat posed by spear-phishing is the harm it causes to your company's reputation. Every instance of spear-phishing can leave employees feeling anxious and vulnerable, whether it's a fake CEO email asking for personal information, impersonating a supplier to gain access to their systems, or tricking staff into installing malware on their computer. In some cases, they are too embarrassed to admit that they were duped, which means that the problem may go unnoticed for a long time.