Over the last ten years, spear phishing was used mainly by espionage groups sponsored by different world states to delude high-ranking people by deceiving them to disclose specific information precious to the attackers. But recently, their strategy has changed and specialists wondered why they troubled to “spread crypto ransomware or banking trojans to the masses when a single scam e-mail could do the trick?” (Godin, 2016) This article investigates the answers to this question, the main ingredients that turn a cyber attack into a successful spear phishing and some protective ways against this sweeping wave of cybercrimes.