Whaling attack, also known as whaling phishing attack, is a highly dangerous and deceptive variation of phishing designed to target high profile executives, or “whales”, in order to steal sensitive information from a company.

These attacks mainly target those people that hold higher positions within the company and typically have complete access to sensitive data. The goal is to manipulate the victim into authorizing high-value transfers to the attacker.