Spearphishing is a variant of phishing that focuses on one person or a very limited group of people in, for example, an organization, who are specifically selected on the basis of their access position in order to achieve the greatest possible effect without being too noticeable.