Phishing is a type of social engineering attack often used to steal user data, including login credentials and credit card numbers by bad gauys.
Spear phishing is an email or electronic communications scam targeted towards a specific individual, organization or business.