Overview
Whaling attacks are designed to steal sensitive information or authorize large financial transfers. Because the targets are high-level, the lures are often sophisticated, such as fake legal subpoenas or executive briefings.
Impact
Whaling can result in massive financial losses, theft of intellectual property, and significant reputational damage.
Defense
- Executive-level security training.
- Strict financial controls and verification procedures.
- Advanced threat protection for executive email accounts.