ISC Cybersecurity Threats · Updated November 2026
Phishing, Spear Phishing, Whaling, Pharming: What Is the Difference?
Classify the delivery method and targeting level rather than memorizing attack names in isolation.
Phishing
Broad deceptive messaging sent to many potential victims to trick users into revealing information or taking unsafe actions.
Spear phishing
Targeted phishing customized for a particular person or group.
Whaling
A highly targeted attack aimed at senior executives or other high-value individuals.
Smishing and vishing
Smishing uses text messages. Vishing uses voice communications.
Pharming
Attempts to redirect users to fraudulent destinations, potentially without relying on a deceptive email click in the same way phishing does.
The takeaway
Ask how the attack is delivered and how narrowly the victim is targeted.
Related Summit guides
FAQ
Is spear phishing more targeted than phishing?
Yes.
What is whaling?
Targeted phishing aimed at high-value or senior individuals.
What is smishing?
SMS-based phishing.