OSINT is a legal methodology of gathering information on an individual via means of public information.
Using Google Dorking, tools and other things, the attacker can gather an identity of the victim.
It can be used for spear phishing or regular phishing