According to the SANS Institute, 95 percent of all attacks on enterprise networks start with a successful spear phishing attack.
For example, Arizona Secretary of State Michele Reagan revealed that the state’s much-publicized August breach in its voter registration system owed itself to a spear phishing attack mimicking an actual state employee.