Spear-phishing attacks

Spear-phishing attacks are specifically targeted at an individual or entity. Their main value is that they are targeted at a small group of users. These are quite often used in penetration testing, targeting specific email addresses of the client. You must spend more time in researching the client by gathering information, such as email signatures, logos, and understanding what the communications from the customer may look like. Often, you may register a look-a-like domain that may seem familiar when they see the from message. 

In this recipe, we will create and launch a targeted spear-phishing attack.

Getting ready

Let's ensure the following prerequisites:

• Kali Linux is running, and you are logged in as root
• You have some email accounts and/or preferably a lab SMTP server

How to do it...

We will now use set to create a spear-phishing attack:

1. From the Applications menu, select Social Engineering Tools | SET Social Engineering Toolkit. You will be presented with the following...