Phishing is where you send out links or attachments in believable-looking emails in the hope that someone will click through, or open up your attachment, and end up sucked into giving away secret information such as usernames and passwords.
Spear-phishing is essentially the same approach, but with the emails made yet more believable by targeting, or tailoring, each email for each recipient.
