Which technique is characterized by targeted cyber-attacks aimed at stealing sensitive data?

Spear-phishing is recognized as a technique that involves highly targeted cyber-attacks designed to deceive individuals into divulging sensitive information, such as login credentials or financial data. Unlike broader phishing attempts that may cast a wide net, spear-phishing focuses on specific individuals or organizations, often using personalized tactics to gain trust and increase the likelihood of success. This targeted approach often employs social engineering techniques, where attackers research their targets before crafting messages that appear legitimate, thereby enhancing the chances of exploitation.

On the other hand, overt operations refer to actions conducted without concealment to gather information, and covert operations typically involve concealed activities intended to remain undisclosed. Intelligence collection tradecraft encompasses a wide range of methods for gathering information, but it does not specifically focus on the targeted cyber-attacks characteristic of spear-phishing. Thus, the focus on targeted deception and data theft firmly positions spear-phishing as the correct answer in this context.