Skip to content
SecAIQ

Whaling

A highly targeted phishing attack aimed at senior executives or other high-profile individuals within an organization.

·1 min read

Whaling is a form of spear phishing that specifically targets senior executives, board members, or other high-value individuals within an organization, the "big fish" the name refers to. Attackers research their target extensively, often referencing real projects, colleagues, or events to make the message convincing.

A common whaling scenario involves an email that appears to come from a CEO urgently requesting a wire transfer or sensitive employee data, exploiting the authority and urgency associated with executive communication. Because these attacks are so tailored, technical filters alone often aren't enough, verification procedures for unusual financial requests matter just as much.

Was this helpful?

Share on