Whaling is phishing aimed at high-profile individuals, such as a company CEO. It exploits the human element of security by directing deception toward influential targets. section 11.2.2
Distinguish whaling from related social-engineering attacks:
- Spear phishing targets employees of a particular company. section 11.2.2
- Smishing uses SMS messages, while vishing uses phone calls. section 11.2.2
- Awareness programs and formal user training help people recognize and respond to social-engineering threats. section 11.6
High-profile target
A company CEO represents the characteristic whaling target because the attack is directed at a senior, high-profile individual. section 11.2.2
