T1598.001sub-technique of T1598 Phishing for Information

Spearphishing Service

PREnothing on this site yetT1598.001 on attack.mitre.org

Adversaries may send spearphishing messages via third-party services to elicit sensitive information that can be used during targeting. Spearphishing for information is an attempt to trick targets into divulging information, frequently credentials or other actionable information.
MITRE ATT&CK 19.2, retrieved 2026-09-12

how MITRE says to see it

Detection of Spearphishing Service

Monitor social media traffic for suspicious activity, including messages requesting information as well as abnormal file or data transfers (especially those involving unknown, or otherwise suspicious accounts).

what reduces it

M1017 User Training. Users can be trained to identify social engineering techniques and spearphishing attempts.

the rest of T1598

T1598.002 Spearphishing Attachment · not covered yet
T1598.003 Spearphishing Link · not covered yet
T1598.004 Spearphishing Voice · not covered yet

The description, detection analytics and mitigations are reproduced from MITRE ATT&CK, version 19.2, under its terms of use. The checklists, hunts, labs and everything else linked here are this site’s.