Spear phishing is a targeted attack on individuals or organisations using personalised messages crafted from detailed information about the victim. These messages often include malicious links or attachments. To protect against such attacks, be cautious with unsolicited emails, verify sender identities, avoid suspicious links, use strong passwords, and keep software updated.