TechKnowSurge
CompTIA Security+ 2.2
InteractiveSecurityFree

How Wide Is the Net?

Phishing, spear phishing or whaling? Sort each email by who it is aimed at.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

What you are doing: deciding how wide each email’s net is. Phishing: the same generic message broadcast to many people, effective by sheer numbers. Spear phishing: a spear has a point, so this is phishing aimed at one specific person, with details built for them; it is more effective than generic phishing. Whaling: spear phishing aimed at a high-level target, the chief executive and the rest of the C-suite, at the top of the company structure. How to use it: first ask whether the email is built for one person. If not, it is phishing. If it is, ask whether that person is a top executive (whaling) or anyone else (spear phishing).

What you'll learn

Aligned to

CompTIA Security+
2.2 Explain common threat vectors and attack surfaces.

Key terms

Phishing
A social engineering attack that uses deceptive emails or messages to trick users into revealing sensitive information.
Spear Phishing
A targeted phishing attack directed at a specific individual or organization using personalized information.
Whaling
A type of spear phishing attack that targets high-level executives or senior leadership within an organization, such as CEOs or C-suite members.

Topics

Phishing Spear Phishing Whaling Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →