Spear Phishing

It is pretty scary to think about a kid in Romania targeting *you* for a phishing attack. Imagine, he knows your address, your phone numbers, your spouses name, etc. and he seeks to do you, personally, harm. It could even evolve into personal extortion attacks: "Pay me $500 or I sell your identity online and ruin your life".

I hate to say it but this fits with what is going on out there. Targeted attacks against enterprises are on the rise (See the UK and Israeli Trojan incidents). Why not targeted attacks against individuals?