THREAT‑WATCH
Glossary
Whaling
A phishing attack specifically targeting senior executives, using research-backed, highly personalized pretexts.
Whaling attackers research their target's role, communication style, and business relationships (often via LinkedIn and public filings) to craft a convincing, personalized message, frequently impersonating another executive or board member requesting an urgent wire transfer or sensitive data. Because executives often have broader access and approval authority, a successful whaling attack tends to cause disproportionately large damage.