Phishing attack specifically targeting senior executives and high-value individuals within an organisation.
Whaling is spear phishing aimed at 'big fish'—CEOs, CFOs, board members, and other senior executives. These attacks exploit the authority and access executives have, often impersonating other executives, board members, or external parties like lawyers and auditors. Whaling emails are highly sophisticated, referencing real business matters and using professional language. Successful whaling can lead to fraudulent wire transfers, disclosure of confidential information, or credential theft providing access to sensitive systems.
Why It Matters
The DSC Perspective:
Executives have authority to approve payments and access to strategic information—making them high-value targets. Ensure executives receive additional security awareness training and consider extra verification procedures for significant financial decisions.