Here is a good write up on spear phishing