To be ready for attacks targeting your company, information security officers need to know about received spear-phishing e-mails.