A targeted phishing attack directed at a specific individual or organization, using personalized information to make the deceptive message appear legitimate and trustworthy.