Spear Phishing is a scheme. This scheme is very similar to the email phishing scam, except it attacks businesses. Spear phishers send emails to almost every employee of an organization and can be written to look like it has been sent by a division within the organization such as the IT or the human resources department.
For instance, the email might state that every employee must send their user name and password for verification purposes.
This potentially not only gives the attacker access to your personally identifiable information but also the company’s private information.
Ref.: http://www.utica.edu/academic/institutes/cimip/idcrimes/schemes.cfmZ