Social Engineering Attacks and Mitigations Part VII: Whaling

This report summarizes phishing with an emphasis on whaling, a targeted form of phishing aimed at senior executives using personalized PII to craft convincing messages. It explains that attackers invest time to research high-value targets to increase success and access, and recommends that organizations provide specialized security awareness and phishing prevention training for executives in addition to company-wide training.