Spear Phishing or How to Get into a Gmail Account

"Most people know to ignore the e-mail overture from a Nigerian prince offering riches in exchange for a bank account number. That is a scam, plain to the eye.

But what if the e-mail appears to come from a colleague down the hall? And all he asks is that you add some personal information to a company database?"

It's a tough one this.

How would you know? Just make sure you are not a whale.

from The New York Times

see E-Mail Fraud Hides Behind Friendly Face